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(54) SELECTIVE ADDER FOR SIDE EFFECT OF FILING SYSTEM 

(5 7) Abstract: 

PURPOSE: To provide a backup filing 
system(BFS) which can be used without changing 
an AP, OS or hardware, 
j CONSTITUTION: The BFS is realized by a base 
computer system(BCS), substitutional library 
(DLRL) to be dynamically linkable to the BCS, 
and user level process(ULP). The DLRL has the 
same IF as the standard DLL of a filing 
operation(FO). The function of the DLRL 
performs the same OF as the function of the DLL. 
Concerning this function, a message(MS) for 
designating the operation actually under 
executing is sent to the ULP of the BCS. The 
ULP performs the operation designated by the 
[L":^,^^^^^^ _ «^ J. L'''_ L];ij^Jj MS to a backup file(BF) at the BCS. The BF to 
" ' " be backed up is designated by identifying a sub- 

tree(ST) in a name space(NS) of the PFS. The ST 
forms a user definition NS. The processes of the 
BCS and BFS are monitored and a monitor 
process for processing a fault is used as needed so that the BFS can be made error 
allowable. 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] In the equipment which adds a side effect to the actuation to the entity 
performed by performing the function in the library linked djniamically alternatively It 

substitutes for the means which matches with an entity the display of the side effect 
which should be added, and the library linked dynamically. It consists, of an altemate 
library which has an alternative function and which is linked dynamically. And said 
alternative function It is operated by the same approach as the function in the library 
linked dynamically. Furthermore, alternative addition equipment of the side effect of the 
file system characterized by performing this side effect when the thing and the display 
matching means which a side effect determines whether to be what performed about an 
entity from a display matching means, and should be performed show. 
[Claim 2] The 1st user process which performs the application program which operates 
about the 1st file in the 1st file system using the function from the library where the 1st is 
linked dynamically, The 2nd user process which operates in the 2nd file system, The 
library where the 2nd which has the alternative function of the function from the library 
where it substitutes for the library where the 1st is linked dynamically, and the 1st is 
Hnked dynamically is linked dynamically, This alternative ftmction operates about the file 
in the 1st file system by the same approach as the function from the 1st library. The 
message which specifies the actuation to the 2nd user process is transmitted. 
Furthermore, [ which can be performed by the 2nd user process ] a means to answer this 
message by performing actuation about the 2nd file in the 2nd file system by which 
message ****** assignment is carried out — since -- the becoming file duplicate system. 



[Translation done.] 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Industrial Application] This invention relates to a computer system. Furthermore, this 
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invention relates to the technique used with the apphcation programme level of a system 
at a detail, in order to correct the effectiveness of the call performed to the operating 
system. 
[0002] 

[Description of the Prior Art] The computer system is hierarchized. In a typical system, a 
hierarchy includes the hardware (for example, communication media to which a 
processor, memory, large capacity storage, and these components are made to link) of the 
lowest layer. The following layer is an operating system. An operating system controls 
actuation of hardware and defines a series of logical devices. The actuation in a logical 
device turns into actuation in the hardware controlled by the operating system. The 
logical device supplied by the operating system is used rather than an operating system 
by the program in the upper layer. These hierarchies are called the user level of a system. 
[0003] The important trouble in the design of a computer system is level by which the 
actuation performed by the system is defined. For example, in order to operate it by an 
operating system's supplying a series of abundant logical devices to an application 
programme level, or supplying a series of small-scale fundamental logical devices, it is 
expected that a user's application program will combine a fijndamental device if needed. 
Also in hardware, this is completely the same. The antinomy on the design in each level 
is the same. 

[0004] Although a series of abundant logical devices simplify programming in the 
following level, the complexity of the level which supplies a logical device increases, 
consequently the overall flexibility of a system falls. When complicated actuation is 
especially performed by the lower layer of a system, these actuation must be performed 
without the benefit of available information by the upper layer. 

[0005] The trouble on the design described here is explained to the detail into the paper it 
is [ JIE dirty SARUZA's and others (J. H.Saltzer) "end-to-end problem in a system 
design" carried on ESHIEMU transactions-on computer systems (ACM Transactions on 
Computer Systems), the 2nd volume. No. 4 (November, 1984 issue), and 277-288 pages ] 
entitled. 

[0006] An example of an antinomy is brought about by the design of a backup file 
system. A backup file system gives a part of another file system or all backup. Since this 
is the system backed up, a backup file system also saves the known file name in [ some ] 
the system backed up instead of**** which saves a file content. The actuation performed 
about a file has plentifiilly the case where it is desirable to repeat also about the file in a 
backup file system. 

[0007] When a backup file system exists, even if an original file system is destroyed or it 
becomes impossible of operation, there is no information lost. Furthermore, since a 
backup file system also saves a name (name) with the contents, a backup file system can 
be immediately used by the program currently used with the broken file system. Needless 
to say, although an application program can always produce the backup file system of 
itself, the desirable solution of a backup file system problem is always an approach that it 
can back up without modification of application. 

[0008] Drawing 1 shows the conventional approach against the design of a backup file 
system. In a multiprocessing computer system, the actuation specified by the program 
performed in an applicafion process is answered, and a file system performs actuation to 
a file. The file system itself is realized using at least one operating system process and 
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hardware (for example, disk drive). 

[0009] The relation between an application process and an operating system process is 
the relation between a client and a server. A server process operates it and an application 
process requires that the result of the actuation should be returned to an application 
process. Therefore, in a system 101 , the application process 103 requires that the kernel 
server 113 should perform file manipulation 109. For this reason, the kernel server 109 
returns 111 for actuation as a result of a deed. 

[0010] Needless to say, the kernel server 109 operates it by changing data with a disk 
drive 1 1 7. The interfaces between a disk drive 1 1 7 and the kernel server 1 1 3 are the 
components of the kernel server 1 13 called the characteristic driver 1 15 to the disk drive 
1 17 of a predetermined type. 

[001 1 ] In the Prior art, the backup file system was realized in the hardware level 1 19 and 
the operating system level 107. In the system 101 of drawing 1 , it realizes in the 
hardware level 1 09. Although a disk drive 1 1 7 appears as a usual disk drive to a server 
1 13, it includes the mirror disk 1 19 (a) and 119 (b). 

[0012] Each file has the copy of both disks and actuation of changing a file is performed 

to the copy of each disk. Therefore, each disk includes the copy of a file system. Even if 
one side of a disk breaks, the system of other disks is still available. Needless to say, the 
special fault of a system 101 is needing specific hardware. 

[0013] The backup file systems 121 and 123 are realized with an operating system level. 
A system 121 has two non-mirror disks 123 (a) and 123 (b). Each disk has a separate 
driver 115 (a) and separate 1 15 (b). When a server 1 13 performs file manipulation, such 
as creation of a file, deletion, or other modification, a driver 1 1 5 (a) makes this actuation 
carry out to drive 123 (a), and a driver 115 (b) makes this actuation carry out to drive 123 
(b). 

[0014] As a result, the ID copy of a file system exists in drive 1 23 (a) and drive 123 (b). 
Although a system 1 2 1 does not need special hardware any longer, the changed operating 
system is still required for it. Furthermore, since a change must be made about a driver 
1 15 (a) and (b), this change must be made in the lowest layer of the kernel server 1 1 3. 
[0015] Although the backup file system 123 also has two non-mirror disks 123 (a) and 
123 (b), each disk is driven by the separate servers 125 and 127. A server 125 performs 
file manipulation 1 09 about the 1 st disk 1 23 (a). When this file manipulation is creation 
of a file, deletion, or other modification, a file manipulation message also transmits a 
server 125 to the backup server 127. And the same file manipulation is performed after 
that. 

[0016] Consequently, the copy of the file system currently actually used by the 
application process 103 exists in both disk drives 123 (a) and 123 (b). Generally the 
backup file system 123 is realized by the distributed computer system including many 
component computer systems 131 . In such a system, although the application process 
103, the kernel server 125, and a disk drive 123 generally exist in one component system 
131 (a), the backup server 127 and a disk drive 123 (b) exist in another component 
system 131 (b). 

[0017] What is necessary is just to change a server 125 like a system 121, so that a 
message may always be sent to a server 127 when changing the file about the application 
process 103 although a system 123 needs modificafion of an operating system. The 
backup server 127 answers this message by the completely same approach as answering 
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file manipulation 109 from other processes about the component system 131 (b). 
[0018] Although systems 101,121 and 123 are all effective in creation of a backup file, 
these all have a serious defect. These systems need one of the modification of special 
hardware or an operating system, consequently do not become a pocket mold the 1st. 
[0019] The computer system by which these systems should be performed must gain 
these components, when it does not have special hardware or a special operating system. 
Furthermore, once a system 1 01 , 1 2 1 or 1 23 will be in a busy condition, all the computer 
systems for a shift must have special hardware or a special operating system. 
[0020] Since systems 101,121 and 123 operate [ 2nd ] with a hardware level 109 or the 
operating system level 107, all files appear to these systems equally, and these systems 
only back up all the files changed according to the application process 103, 
[0021] However, generally there is no need of backing up all files. When the file in a 
UNIX (trademark) operating system was analyzed, it became clear that 50 - 60% of the 
file in a file system was a temporary work file which has only the life of under a for [ 3 
minutes ]. In many cases, there is no need that almost all the things of these files back up. 
[0022] However, the method of identifying these files to the kemel server 113 does not 
exist. It is waste of a system count resource and a system storage resource to perform 
needless to say and unnecessary backup. ■ 

[0023] Unnecessary backup is the special example of the aforementioned general 
problem. The information about this actuation is no longer used for a system, so that it 
will be carried out, if actuation is performed from a user. As shown by the example of 
backup, a result will be almost unexceptional and will be called inefficient use of a 
system resource. 
[0024] 

[Problem(s) to be Solved by the Invention] Therefore, the purpose of this invention is 
offering the system which can perform actuation with usefial User Information without 
modification of an application program on user level. 

[0025] Another purpose of this invention is offering the backup file system which can use 
the advantage of User Information about the file which can operate on user level, can 
carry, and should be backed up. 
[0026] 

[Means for Solving the Problem] The aforementioned trouble is solved by the user level 
backup file system of this invention. The backup file system of this invention is 
transposed to a series of library routines to which actuation of a series of standard library 
routines is emulated, and a backup file system also processes a series of standard library 
routines which supply a file command to a kemel server. When an application program 
specifies actuation of changing a file, the altemative library routine for this actuation 
performs this actuation. 

[0027] An altemative library routine performs two actions. That is, the message which 
specifies the actuation which a kemel server is made to perform assignment actuation, 
and is actually performed by the kemel server is supplied to the user level back-end 
server in another computer system. Subsequently, a user level back-end server supplies 
the file manipulation specified by this message to the kemel server in other computer 
systems. 

[0028] Therefore, creation and maintenance of a backup file become the side effect of the 
file manipulation performed by the alternative library routine. All the components of a 
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backup file system exist in user level, and it can be used by all the systems that can 
perform a routine further in an alternate library by the ability using this system, without 
changing hardware, an operating system, or an application program, since an alternative 
library routine emulates the library used from the first by the application program. 
[0029] Another advantages of the user level backup file system of this invention are 
which file being backed up and performing the client process 303, in order to specify. 
This assignment is performed by duplicate tree DS. This duplicate tree DS specifies the 
part of an accessible file system as the client 303 which includes the file which should 
back up. 

[0030] The code in the library routine which emulates file manipulation checks duplicate 
tree DS, in order to determine whether to be that by which the file at the time of a library 
routine performing actuation should be backed up. When it should be backed up and 
actuation changes [ and ] a file, the message which includes file manipulation is 
transmitted to a back-end server process. 

[0031] hi order to enable user level redefinition of the functionality offered by the lower 
layer of a computer system, generally the combination of the library routine which 
specifies the side effect of the actuation to a certain kind of entity, and which entity has 
received the bad influence according to the side effect and the DS to specify is used. For 
example, a user level logic file system can be defined, and this technique can be used 
although the map of the user level logic file system is carried out to the file system 
offered by the operating system. 
[0032] 

[Example] Hereafter, this invention is explained concretely, referring to a drawing. 
[0033] Interface modification by use of a library: The computer system is hierarchized as 
the drawing 2 above explained. Each class forms an interface to the following upper 
layer. The upper layer responds for the interface of a lower layer needing, and specifies 
the actuation which should be performed by the lower layer. When the upper layer does 
not suit the interface needed by the lower layer, an adapter layer must be added between 
the upper layer and a lower layer. 

[0034] The purpose of an adapter layer is translating the operating specification created 
according to the interface expected with the upper level into the operating specification 
for which it is needed by the interface of a lower layer. For example, an MSDOS 
operating system can be made to consider, if this technique is used as if it was the 
computer which performs a UNIX operating system for ****** PC to that user. 
[0035] When an adapter layer is needed very much by many application programs, this is 
often realized as a series of library routines. As this name suggests, a library routine is a 
routine with which the user of a computer system is provided, in order that the 
manufacturer of the subsystem of a computer system may use it with an application 
program. 

[0036] Drawini; 2 shows the operation of the library routine for creating an adapter layer. 
A user program 20 1 has an interface 206 to the next hierarchy (they are a series of system 
routines in this case). However, the system routine in the computer system for which a 
user program 201 should be used has an interface 213. The difference between an 
interface 206 and an interface 2 1 3 is shown by when the configurations of a continuous 
line which show each interface differ in drawing 2 . 

[0037] An adapter layer consists of a library routine 207. A library routine 207 has the 
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interface 206 for the following layers of the high order needed by the user program 201, 
and the interface 213 for the low-ranking following layers needed by the system routine 
205. An interface actually consists of a function (function or function) call. By generating 
the function call needed by the interface 213, the routine in a library routine 207 answers - 
the function call 203 needed by the interface 206, operates, and performs actuation 
specified by the function call 203. 

[0038] As shown by the arrow 21 1 , a system routine returns the activation result to a 
library routine 207, and after the system routine 215 is completed, subsequently a library 
routine 207 returns a result to a user program 201, as shown by the return 205. 
[0039] When generating the activation code of the interface redefinition user program 
201 by use of the library routine linked dynamically, the usefulness of the library routine 
concerning redefinition of an interface with the conventional system by the fact of having 
to make a library routine link to a user program 201 was low. 

[0040] "Linking" here is processing which relates a call of the library routine in a user 
program 201 to the location of the library routine in the copy of a library routine 207. 
Since it had to link when an executable code was generated, the user who has only the 
copy of an executable code was impossible for transposing a certain library routines 207 
of a series of to a series of another library routines 207. 

[0041 ] The computer system which can make a library routine link to a user program 
dynamically was developed by this invention. In such a computer system, when the 
process which performs a user program is loaded to the memory of a computer system 
before activation, linking is performed. 

[0042] By dynamic linking, a certain library routines of a series of can be transposed to a 
series of another library routines, without changing the object code of a user program, 
and, thereby, the behavior of the system by which a user program is operated can be 
changed. The explanation about dynamic linking is indicated to "the common library 
(Shared Libraries)" published in May, 1988 from Sun Microsystems, Inc. which does the 
whereabouts to Mountain View of the U.S. and Califomia. 

[0043] Drawing 3 shows how to change the behavior of a system using dynamic linking. 
In a system 1301, an user process 307 performs the application program 309 with which 
the operating system library 1315 was combined dynamically. The operating system 
library 1315 supplies an interface to the application program 309 shown in call 311 and 
return 3 1 3 list by the return 3 1 9 from the user call 3 1 7 to the kernel server 305, and the 
kernel server 305, in order to perform actuation specified by call 311. 
[0044] In a system 2, an user process 307 performs the same application program 309, 
and uses the same kernel server 305. However, the operating system library 2321 is used 
instead of the operating system library 131 5 in this case. All the things that the operating 
system library 1315 performs perform the operating system library 2321. However, the 
operating system library 2321 generates a side effect 323 further. 
[0045] Therefore, it being the need in order to change it into the system 303 which also 
generates a side effect 323, although behavior of the system 310 is carried out like a 
system 301 is only making the operating system Ubrary 2321 link to a user program 309 
dynamically instead of the operating system library 1315. 

[0046] Creation drawing 4 of the user level name space by using the library linked 
dynamically shows how to control a side effect 203 using the approach of creating user 
level name space using the operating system library 403 linked dynamically, and this user 
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level name space. The entity in the computer system of a function, a file, a device, etc. is 
quoted in a program with a name. 

[0047] Therefore, the function of the name space of a computer system is relating the 
name used in a program to the entity shown with this name. In the conventional computer 
system, the name space used by the user program is created by the operating system, and 
is held. In the system 401 of this invention, the operating system library 403 creates and 
holds one or more user level name space for user-process 409. 

[0048] The one approach of using the user level name space 405 by the library routine 
403 is creating the user level logic file system with which the file system with which a 
user program's 309 is supplied by the kernel server 305, behavior, and structure differ 
from these both. This logic file system can be used in order to control a side effect after 
that. 

[0049] For example, a side effect 323 needs a system 401 a backup file system disk **** 
case to generate a backup file system, and the user level name space 405 specifies which 
file in the file system supplied by the kernel server 305 should be backed up in a backup 
file system. User level name space is a part of environment of an user process 409 so that 
clearly from drawing 4 . 

[0050] A general view of a user level backup-file system: In order to form the user level 
backup file system which backs up automatically only the specific file of the files 
changed according to the application process which performs drawing 5 and the drawing 
6 application program, the aforementioned library and the user level name space which 
were linked dynamically can be used. 

[0051] Drawing 5 shows such a user level backup file system 501. A system 501 is 
realized by two computer systems, a main system 511 and backup system 513. A main 
system 511 performs the application process 503, and backup system 513 holds the 
backup copy of the file changed according to the application process 503. A main system 
5 1 1 and backup system 5 1 3 are connected by the communication media which can 
transmit the message from the process performed with a main system 51 1 to the process 
performed with backup system 513. 

[0052] The components of the system 501 in a main system 511 are the application 
process 503 and the kernel server 305 (a). The kernel server 305 (a) supplies a file system 
to a main system 5 1 1 . In drawing 5 , although a file system is shovra by the local disk 307 
(a) to a main system 511, this file system can also be a remote file system arranged 
together with another system. 

[0053] In any case, the kemel server 305 (a) performs file manipulation to a file system, 
and call 317 is answered from the application process 503, a result 319 is returned to a 
process 503, and, as for a file system, the file system itself performs required actuation to 
a disk 307 (a). In order to perform file manipulation in the kemel server 305 (a), the 
application process 503 uses the library in which a djmamic link is possible. 
[0054] This library is permuted in a main system 51 1 by the new library called lib.3d507. 
A library 507 answers call 317 and the file manipulation which changes a specific file 
also by transmitting the backup message 512 by supplying the proper call 317 to the 
kemel server 305 to backup system 51 3 is specified. The file which transmits the backup 
message 5 12 by modification is specified in the front end duplicate tree (FRT) 505. 
[0055] The front end duplicate tree (FRT) 505 is held by the routine in lib.3d507, and is 
used so that it may be shown by the arrow 506. Therefore, the duplicate tree 505 defines 
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the user level logic file system which consists of a file which produces modification of 
the backup file in a system 5 1 3 by modification. 

[0056] The component of the system in backup system 513 is the standard file system 
server and disk drive the back-end server 515, a user level process, the kernel server 305 
(b) and a disk 307 (b), and for backup system 513. The kernel server 305 (b) supplies a 
file system to the back-end server 517. The data about a file system are memorized by the 
local disk 307 (b) in drawing 5 . However, it is also memorizable to a remote system. 
[0057] The back-end server 515 performs file manipulation to the kernel server 305 (b) 
by call 317, and receives the result of a call ft*om a server 305 (b). The back-end server 
5 1 5 holds the back-end map 517. This back-end map 5 1 7 carries out the map of the file 
specified with the back-end duplicate tree 505 to the file in the file system of backup 
system 513 which serves as these backup. In the example which has the name space 
where the file system generated by the file system and the kemel server 305 (b) which 
were generated by the kemel server 305 (a) is the same, the back-end map 517 is 
unnecessary. 

[0058] The approach of a system 501 of operation is shovm in drawing 6 . Drawing 6 is 
the general-view Fig. of the gestalt of the routine 601 in the library 507 which changes a 
file. The routine name 603 and argument 605 which a routine has are the same as that of 
the name of a function and argument which are used for performing file manipulation in 
the library permuted by the library 507. Therefore, a call of this routine in an application 
program 509 calls a routine 601 . 

[0059] After performing all things to be prepared, a routine 601 makes the same file 
manipulation as the routine permuted by the routine 601 perform to the kemel server 305 
(a). If actuation is successful, it will be determined whether it is shown that a routine 613 
is that to which the file by which a call and the ft-ont end duplicate tree 505 are changed 
should back up a function 613 with the name of a file changed. When the fi*ont end 
duplicate tree 505 shows such, a function 615 sends the message 512 which has an 
argument 617 to backup system 513. 

[0060] This message requires that backup system 5 1 3 should perform actuation to the 
completely same backup file system as the actuation performed with the file system 
supplied by the server 305 (a). After sending a message, the return of the routine 601 is 
carried out. When a file does not exist in the front end duplicate tree 505, or also when 
the actuation specified by the function 607 is not successfiil, the retum of the routine 601 
is carried out. 

[0061] The section of the code to which the sign 6 1 1 was given in drawing 6 specifies a 
side effect (in this case, message 512). The description of a routine is sending a message 
512 to backup system 513, only when file manipulation is successful with a main system 
51 1 . It is because it is not necessary to back up unsuccessful actuation. 
[0062] Generally there are two gestalten in the file manipulation in a system 501. It is 
changing user level name space 405, and another is a thing for which one is realized by 
the front end duplicate tree 505 and the back-end map 517 and which do not change. 
Actuation of the 2nd gestalt is the writing to the file specified in the front end duplicate 
tree 505. The write-in function in lib.3d507 has the same interface as the write-in 
function in the library permuted by lib.3d. 

[0063] In the desirable example, as an argument, this function has the integer which 
shows the size of the pointer and the write data-ed to the file descriptor of the intejger 
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used by the kernel server 305 (a), and the buffer containing a write data-ed, in order to 
identify a file. If it requires that the write-in function in lib. 3d should perform a system 
write-operation to the file as which the kernel server 305 (a) was specified by the file 
descriptor and actuation is successful, it will confirm whether the file from which the 
function was discriminated by the file descriptor exists in the fi*ont end duplicate tree 505, 
and if it exists, a function will send the write-in message 5 1 2 to the back-end server 515 * 
in backup system 513, and will carry out a return. 

[0064] A message includes information required to perform correctly the write-operation 

in the backup file system performed by the system write-operation in the file system 
which identified the file written in by the kernel server 305 (a), and was supplied by the 
kernel server 305 (a). If the back-end server 515 receives a message, the back-end server 
515 will determine the file descriptor which uses the back-end map 517 and the kernel 
server 305 (b) uses for backup files, will use a system [ which was supplied by the kernel 
server 305 (b) after that ] write-in function, and will perform the write-operation to a 
backup file using the data and positional information which were given into the message. 
[0065] The simple case of actuation of changing the user level name space 405 is file 
deletion. A deletion function confirms whether it is necessary to delete the information 
about the deleted file from the front end duplicate tree 505, and if, as for the deletion 
function supplied by lib. 3d, it requires that the kernel server 305 (a) should delete a file 
first and this deletion is performed, when it is necessary to delete, a deletion function will 
delete this information. 

[0066] Next, a deletion function sends and carries out the return of the message required 
for deletion to the back-end server 515. If the back-end server 515 receives this message, 
a deletion function will arrange a file on the back-end map 517, it will require that the 
kernel server 305 (b) should delete this file, and all actuation to the back-end map 517 
needed for coincidence by this deletion will be performed. 

[0067] A much more complicated example is renaming. Renaming of the file in the file 
system supplied by the kernel server 305 (a) can have the result which has the following 
three possibility in the user level name space 405. 

[0068] ** The original name of a file is a part of user level name space 405, and when a 
new name is also a part of user level name space 405, a file remains in the user level 
name space 405. 

[0069] ** The original name of a file is not a part of user level name space 405, and when 
a new name is not a part of user level name space 405, either, a file is added to the user 
level name space 405. 

[0070] ** The original name of a file is a part of user level name space 405, and when a 
new name is not a part of user level name space 405, a file is deleted from the user level 

name space 405. 

[0071] In the 1st case, the renaming function of lib. 3d requires that the kernel server 305 
(a) should rename with the file system. Subsequently, it confirms whether the renamed 
file exists in the user level name space 405, and if it exists, since this renaming is 
reflected, a renaming function will change the front end duplicate tree 505, and will 
require and carry out the return of the renaming [ in / for a message / delivery and there ] 
to the back-end server 515. Needless to say, this message includes an old and new path 
name. If the back-end server 515 receives a message, a server 515 will require renaming 
of the kernel server 305 (b). 
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[0072] In the 2nd case, a renaming function requires renaming from a server 305 (a), and 
the file renamed as mentioned above confirms whether exist in the user level name space 
405. However, in this case, a renaming function deletes the information on a renaming 
file from the front end duplicate tree 505, and sends and carries out the return of the 
message to the back-end server 515. The message to the back-end server 515 is a deletion 
message of a file. Answering this message, the back-end server 5 1 5 makes the kernel 
server 305 (a) delete a backup file. 

[0073] In the 3rd case, a renaming function requires the again above renaming. However, 
two kinds of messages must be sent in this case. It requires that the 1st message should 
create the file which has the name of a file moved to the user level name space 405 in 
backup system 5 13, the kernel server 305 (b) creates this file, and the back-end server 
515 answers this message by requiring that the entry of this file should be created on the 
back-end map 517 after that. Then, when delivery and the back-end server 515 write the 
write-in message which has the current contents of the file by which the renaming 
function was moved to the user level name space 405 in the kernel server 305 (b) and 
make those contents write in the backup file in backup system 513, this write-in message 
is answered. 

[0074] The single actuation performed by the kernel server 305 in a main system 511 (a) 
requires making actuation of a single string [ server 7 515/ back-end / server / 305 / (b) / 
kernel ] perform so that clearly from the aforementioned explanation. Furthermore, the 
back-end map 517 and the front end duplicate tree 505 are in the always same condition 
at the time of termination of the actuation performed by the functipn in lib.3d507 so that 
clearly from the aforementioned explanation. 

[0075] Implementation of a desirable example: Drawing 7 - 1 1 drawing 7 is the block 
diagram of the desirable example 701 of a user level backup file system. This desirable 
example is realized by the system by which a certain processor performs SunOS4.1 
version of a UNIX (trademark) operating system, and other processors perform MIPS4.5 
version of a UNIX (trademark) operating system. Two component groups exist in a 
system 701 . One group performs backup file actuation and the group of another side uses 
a system 701 as a fault-tolerant (error permission) system. The following publication 
explains first the component which performs backup file actuation, and, subsequently 
explains the component which gives fault tolerance. 

[0076] When explanation is begun from a main system 5 1 1 , the application process 503 
has an application program 509, library lib.3d507 (this function performs backup file 
actuation as a side effect of file manipulation) which can be linked dynamically, and the 
fi-ont end duplicate tree (FRT) 505. File manipulation is performed by the kernel server 
305 (a) by the system 511. The message generated by the function in a library 507 is 
conveyed by backup system 513 with a pipe 710. 

[0077] A pipe 710 is supplied to the application process 503 by the pipe process 71 1, and 
pipe process 711 the very thing communicates with the application process 503 with a 
pipe 709. The pipe process 71 1 supplies the single pipe 710 so that it may explain to a 
detail further below. A pipe 710 is used by all the application processes 503 that create 
backup with backup system 513. 

[0078] When continuing backup system 5 13 in a desirable example, the back-end server 
5 1 5 is divided into two processes (BLP) 7 1 6, i.e., a back-end log process, and the system 
call engine (SYSCALL ENG) 715. In order that both may perform file manipulation, the 
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kernel server 305 (b) is used. The file system maintained by the kernel server 305 other 
than a backup file (b) includes a log file 703 (b), 

[0079] The actuation is as follows. When the engine performance of file manipulation 
arises by activation of the application program 509 which acquires the file identification 
child who specifies a pipe 710 from the pipe process 71 1 when the application process 
503 is initialized, the function of the actuation in lib.3d507 makes the function to the file 
system supplied by the kernel server 305 (a) perform to the kernel server 305 (a), and 
transmits a message to backup system 513 through a pipe 710 further. 
[0080] A message will be received by the back-end log process (BLP) 716 if a message 
reaches backup system 513. The back-end log process 716 carries out the log of the 
message to the log file 703 (b) in the file system supplied by the kernel server 305 (b). 
When a log file 703 (b) has a message in a file, a message is always read with the system 
call engine 715 in order of arrival. 

[0081] Tn the desirable example, the back-end map 517 belongs to the system call engine 
715. According to the system call engine 715 reading a message, the system call engine 
715 makes the file manipulation for which the kernel server 305 (b) was asked by the 
message perform, and system call engine 715 the very thing responds for asking by the 
message, and holds the back-end map 517. 

[0082] As for error permission actuation of the error permission actuation system of a 
system 701, an error's being detected and the detected error need to answer a system by 
the approach of continuing actuation. In the desirable example, detection of an error and 
the response to this detection are processed by WatchD (user level system which creates 
distributed-system error permission). 

[0083] WatchD can be set to the international congress about the 23rd fault-tolerant 
computing held in Toulouse of the France country June 22, 1993 - 24. Software with 
which Hugh Anh, a wye (Huang, Y) and KINTARA, and "fault tolerance of C (Kintala, 
C) were realized: A technique and experience (Software Implemented Fault Tolerance: ) 
the [ Hugh Anh for whom it applied on Technologies and Experiences" and September 
30, 1 992, and / of a wye (Huang, Y) / United States patent application ] - a No. 
07/954,549 specification (name [ of invention ]: — the equipment for fault-tolerant 
computing — ) And it is explained to the approach at the detail. 
[0084] What is necessary is just to understand that a WatchD system includes one 
monitor process over each node of a library and a distributed system called libft in 
explanation of this invention, libft includes the routine which performs checkpoint 
actuation in which the field of the routine which specifies the field of the memory for the 
routine which performs actuation in which a process is registered into WatchD, and an 
auto backup, and these memory receives. A monitor processes the monitor user process 
registered also into WatchD and both monitors. 

[0085] If a monitor detects that the failure occurred in the process registered into the 
monitor, a monitor will restart the process. When a process is restarted by the libft 
function, a process determines what happened. In the process which carries out the 
monitor of the user process to a certain node of a distributed system, a monitor moves the 
copy of important data (determined when this also uses a libft function) to another node 
of a distributed system. 

[0086] When a failure occurs in the node of a monitor, the monitor of the node of another 
side detects this failure, and restarts the user process of the node of another side using the 
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present copy of important data. When a failure node is restored, the monitor restarts an 
user process using the critical information from the node of another side. And the 
message which shows that the user process was restarted is transmitted. If the monitor of 
the node of another side receives this message, the node of another side will end the user 
process performed by that node. 

[0087] Generally, a WatchD monitor is arranged annularly and each monitor carries out 
the monitor of the monitor of the endocyclic next door. Before it becomes impossible for 
the number of the monitors which receive the number of endocyclic nodes and the 

important copy of data of an user process to restart the user process registered into 
WatchD, it determines how many piece failure of the node of a distributed system must 
be carried out. 

[0088] In the desirable example, a main system 5 1 1 and backup system 513 have a 
WatchD monitor, respectively. The relation between a monitor and the component of a 
system 701 is shown by the dotted line 721 . The monitor for main-system 511 is a 
monitor 717. As shown by the dotted line 721, a monitor 717 supervises the monitor 719 
in the pipe process 71 1, the front end log process 705, and a system 513. A monitor 719 
supervises a monitor 717, the system call engine 715, and the back-end log process 716. 
[0089] As shown in drawing 7 , a system 717 can deal with the failure in the front end log 
process 705, the pipe process 71 1, the system call engine 715, and the back-end log 
process 716, and the failure of a system 513. The design which has two parts of the 
system 701 which gives fault tolerance (error admissibility) has the following two main 
purposes. 

[0090] ** About the engine performance, that the overhead of failure recovery is 
certainly small, ** failure, and failure recovery are certainly transparent to application, 
and activation application should not be stopped by any means. 

[0091] The failure method of recovery is based on assumption that it is the component 
which WatchD can trust most within a system. This is because WatchD performs a very 
easy task and the self-healing of it can be carried out after failure generating. 
[0092] Next, recovery from the failure of backup system 513 is explained to a detail. 
Recovery from the failure of other processes is also surveyed. If explanation is begun 
from the failure of backup system 513, in such a case, a system 701 will operate as 
follows. If a monitor 717 detects the failure of a system 513, the pipe process 71 1 is told 
about a monitor 717, the pipe process 71 1 will create the front end log process 705, and it 
will transpose the file descriptor of a pipe 710 to the file descriptor of the pipe 707 to the 
front end log process 705. 

[0093] If the message fiinction used by the application process 503 detects the failure of a 
pipe 710, this message fiinction will require the new file descriptor for pipes 710 from the 
pipe process 711. The pipe process 71 1 gives the file descriptor of the pipe 707 combined 
with the front end log process 705 to a message function, and the message transmitted by 
the message function goes to the front end log process 705 instead of the back-end log 
process 716. If the front end log process 705 receives this message,' the front end log 
process 705 will arrange this message to the log file 703 in a main system 5 1 1 (a). 
[0094] In the desirable example, a message function detects the failure of a pipe 510 as 
follows. A process 503 uses a TCP-IP protocol and transmits a message to a pipe 701 . In 
this protocol, only when a precedence message is received, the following message can be 
transmitted. Therefore, the message fiinction used by the function in a library routine 507 
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transmits a message to a pipe 710 by transmitting two kinds of messages, i.e., the Shinsei 
message, and a dummy message. When a message function can transmit a dummy 
message, the Shinsei message reaches. If the failure of a system 5 1 3 occurs, the message 
transmitted through a pipe 710 does not reach and a dummy message cannot transmit it, 
either. 

[0095] If backup system 513 is recovered, a monitor 719 will make the system call 
engine 715 and the back-end log process 716 restart, and will be notified to a monitor 717 
after that. A monitor 717 is notified to the pipe process 711. The pipe process 71 1 
acquires the file descriptor of a pipe 710, and terminates the Iront end log process 705. If 
the back-end log process 716 restarts by the system 513, a process 716 will acquire the 
copy of a log file 703 (a) from the kernel server 305 (a), and will add this copy to a log 
file 703 (b). Then, the system call engine 715 resumes activation of the message in a log 
file 703 (b). 

[0096] The message function used by lib. 3d is the same approach as the approach of 
acquiring the file descriptor about a pipe 707, and acquires the file descriptor about a pipe 
710. Next, if it tries to use the file descriptor of a pipe 710 in order that a message 
function may transmit a message, this attempt will go wrong and, as for a message 
function, a pipe file descriptor will be again required fi*om the pipe process 711. Shortly, 
a message fimction receives the file descriptor of a pipe 710, and is again connected to a 
back-end log file. 

[0097] The remaining fault condition is processed as follows. 

** The failure monitor 717 of the pipe process 722 detects this failure. The newly 

restarted process searches the connection with a pipe 710 fi"om the process condition 

saved by WatchD. Other processes do not notice this failure and recovery. 

[0098] ** The failure monitor 719 of the system call engine 715 detects this failure, and 

makes the system call engine 715 restart. The newly restarted system call engine 715 is 

recoverable from a foreign file to the precedence checkpoint condition with the 

checkpoint and recovery fimction which are given by libft. Other processes do not notice 

this failure and recovery. 

[0099] ** The failure monitor 719 of the back-end log process 716 detects this failure, 
and makes the back-end log process 716 restart. A process 716 restores the condition 
fi-om a checkpoint file. A monitor 719 notifies further that the back-end log process 716 
was restarted to a monitor 7 1 7, and, subsequently to the pipe process 711, notifies a 
monitor 717. Then, a process 711 connects a pipe 710 to the new back-end log process 
716. The next store of each application file and lib. 3d acquires new connection fi-om the 
pipe process 711. 

[0100] ** As for the failure of the failure front end log process 705 of the front end log 
process 705, only the failure nascent state period of a system 513 exists. If a monitor 717 
detects the failure of the front end log process 705, a monitor will be notified to the pipe 
process 711. Subsequently, the front end log process 705 is made to restart, and a pipe 
708 is re-connected to the fi"ont end log process 705. The next store of an application 
program 509 goes wrong, consequently the message-sending function in lib. 3d acquires 
the file descriptor about the new pipe 708 from the pipe process 71 1. 
[0101] implementation [ of the user level name space 405 ]: — drawing 8 -11 — in order 
to specify all a series of files from the file system supplied by the kemel server 305 (a) to 
the applicafion process 503, the user level name space 405 can be used. Drawing 8 shows 
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the relation between the name space 801 of the file system supplied by the kernel server 
305 (a), and the user level name space 405 in the user level backup file system 701. 
[01 02] In name space 801 , a file name is arranged in the shape of a tree. The file which- 
forms the leaf (B, D, E, G, I, M, N) of the tree in drawing 8 contains data or a program. 
The remaining file is a list of other files. Such a file is called a directory. Even the name 
of the file which can specify all the files in name space 801 to the kernel server 305 (a) 
with the path name which starts by the root "/", and is specified with a path name fi-om 
the root includes the name of all files. Therefore, the path name of a file "D" is /A/C/D 
and the path name of a file "L" is /J/K/L. 

[01 03] The user level backup file system 701 specifies the file which should back up by 
specifying the subtree of the name space 801 which includes a file. Subsequently, 
actuation to the file in the subtree which changes a file is performed to the backup file in 
backup system 513. In drawing 8 R> 8, it is chosen as what four subtrees, 803 (a), 803 
(b), and 803 (c) should back up. 

[0104] Therefore, modification to the data files D, E, G, I, and M or N in name space 801 
will produce modification to the backup file of this data file. Similarly, modification to 
Directories C, F, H, and L will produce modification to these backup files. Since all the 
files in a subtree are backed up, the file which should back up is specified with the path 
name of the directory which is the root of a subtree in the user level name space 405. For 
example, a subtree 803 (a) is specified by a path name / A/C805 (a) in the user level 
name space 405. 

[0105] Needless to say, the map of the user level name space 405 must be carried out also 
to the file system supplied with the system call engine 715. This is performed in the back- 
end map 517. As shown in drawing 9 , the back-end map 517 includes the entry about 
each open file in the user level name space 405. An entry consists of two parts, the user 
level name space informafion 903 and the backup system information 905, of 513. 
[0106] The user level name space information 903 identifies the file in the user level 
name space 405. The backup system information 905 identifies the file in the system 
supplied by the kemel server 305 (b) corresponding to the file identified using user level 
name space information. 

[0107] The back-end map 517 makes it possible to map the subtree of name space 801 in 
the subtree of the name space 907 of the file system which the kemel server .305 (b) 
supplied to the back-end log process 716 and the system call engine 715. This mapping is 
performed by mapping the path name of the root of the subtree of name space 801 in the 
path name of the root of a subtree where name space 907 corresponds. 
[01 08] The path name of the root is called the prefix of the path name of the file in a 
subtree. For example, the path name in a subtree 803 (a) has a prefix/A/C. The path name 
of the file E in a subtree 803 (a) is E. Subtree 909 / Z is made to correspond to a subtree 
803 (a) in name space 907 by mapping a prefix/ A/C in the prefix/Z of name space 907 
from name space 801. After mapping is completed, modification of the file specified by 
the path name/A/C/E in name space 801 produces modification of the file specified by 
the path name/Z/E in name space 907. 

[0109] detail [ of the front end duplicate tree 505 ]: - drawing 10 - user level name 
space 405 is realized by the front end duplicate tree 505 in the desirable example. 
Drawing 1010 is a block diagram showing the front end duplicate tree 505 in a detail. 
Two main components of the front end duphcate tree 505 are RTREE1015 and the file 
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descriptor cache 1027. The path name of the root of the subtree 803 which has the file by 
which RTREE1015 should be backed up is a Unked list. 

[0110] The file descriptor cache 1027 is an array which relates a file descriptor to a 
device and an entry (inode) identifier. Therefore, the form of this implementation is as a 
result of the fact that the file system offered by the UNIX operating system identifies a 
file by the entry (inode) of the identifier of a disk at which is attained to with an integer 
file descriptor and a file resides by three approaches, i.e., a path name, and the file in a 
UNIX file system table. 

[0111] The file descriptor of a file is effective only in the process which opened the file 
again, only while this process opens this file. Although a UNIX file system table enables 
the translation between a device, and inode and the present file descriptor at a path name, 
a device, and the list between inode(s), the direct translation between a path name and the 
present file descriptor is not made possible. 

[0112] If it explains to a detail further succeedingly, maxtryl003 and initlOOS will be 
used for initialization of the front end duplicate tree 505. Before an initialization function 
gives up maxtryl003, it shows the count tried in order to set up a pipe 710 in backup 
system 513. initl005 shows whether the pipe was set up or not. The RPROP array 1009 is 
an array of the name 1011 of the actuation which can be performed by the firont end 
duplicate tree 505. 

[0113] RTREE PTR1013 is a linked list which includes the pointer of the element of the 
beginning of the RTREE list 1015, i.e., a certain element of each duplicate tree 803. Each 
element 1017 includes the pointer 1023 to the die length 1019 of the path name 1021 of 
the root of the duplicate tree 803, and a path name 1021, and the next element in a linked 
list. The connection server 1025 is a path name in the name space 801 of the pipe 710 to 
backup system 513. 

[01 14] The FD cache 1027 is the array of the file descriptor cache entry 1029. Many 
entries 1029 in this array exist like an available file descriptor to the application process 
503. The index of the entry of the predetermined file descriptor in the FD cache 1027 is a 
file descriptor. While it is shown whether an entry 1029 has an effective entry actually 
and being opened by the file, the application process 503 includes the status flag which 
shows whether a child is borne or not. 

[0115] An entry 1029 also includes the identifier 1101 of the file residence device in a 
main system 511, and the identifier of inode of the file in a main system 511. The 
effective entry 1029 of each file actually opened by the subtree 803 specified by the entry 
in RTREE1015 exists. 

[0116] The detail back-end map 517 of the back-end map 517 consists of two parts, the 
path name map 1113 and the opening duplicate file list 1117. The path name map 1113 
only carries out the map of the path name in the name space 801 of a main system 51 1 to 
the path name of the name space 907 of backup system 513. Each entry 1 1 15 in a map 
estabHshes the relation between the front end path name 1117 and the back-end path 
name 1119. 

[01 17] The entry which maps the root of the subtree 803 in the front end name space 907 
on the root of the subtree in name space 907 is inckided by the path name map 1113. The 
back-end path name 1 1 1 9 is a part of backup system information 905. In the desirable 
example, these mapping is specified in a system configuration file. 
[0118] The opening duplicate file list 1117 includes the entry 1 1 19 of each file which the 
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application process 503 opens actually in the duplicate tree 803. The user level name 
space information 903 in an entry 1119 includes the front end file identification child 
(FFID) 1 105 and the front end path name (FP) 1 106. The front end file identification 
child (FFID) 1 105 consists of the device identifiers and inode identifiers of a file in a 
main system 511. 

[0119] The fi-ont end path name (FP) 1 106 is divided into the front end prefix (FPR) 1 107 
and the subtree path name 1 1 08. The front end prefix (FPR) 11 07 is a prefix of the 
subtree of the file in the front end name space 801 . The subtree path name 1 108 is a path 
name of the file in the subtree. The backup system information 905 in an entry 1117 
consists of a back-end file descriptor 1111. 

[0120] The back-end file descriptor 1111 is a file descriptor in the file system supplied by 
the kernel server 305 (b) about this file. In the desirable example, the back-end map 517 
is realized as a hash table. This hash table can be accessed with both the fi:*ont end file 
identification child 1 105 and the front end path name 1 1 06. 

[0121] The approach on which the approaches of creating actuation DS 505 and 517 
including DS 505 and 517 and such DS are made to act by various file manipulation is 
explained. In the desirable example, the application process 503 is performed with the 
UNIX operating system which uses a Kom shell. 

[0122] A process enables it, as for a Kom shell, to set up an ENV variable. An ENV 
variable specifies the file performed always, when a process calls a Kom shell. The file 
specified by the ENV variable in the application process 503 builds the fi*ont end 
duplicate table 505, and since it initializes, it contains information required for the 
application process 503. 

[0123] If created, a table 505 becomes a part of address space of the application process 
503, and is available to the child process of the application process 503. This child 
process is created by fork system call of a UNIX operating system. Therefore, a child 
process inherits the parents' environment. On the other hand, an exec system call gives a 
new environment to a child process. 

[0124] In order to create the available front end duplicate tree 505 to the child of the 
application process 503 created by the exec system call, lib. 3d has the exec function 
which copies the firont end duplicate tree 505 to ENV available about a new process. For 
this reason, even if processes are other points and it is the case where those parents* 
address space is not inherited, lib. 3d is available to this process. Even the pipe with a 
name or foreign file for passing the front end duplicate tree 505 to the child process 
created by exec can be used for other examples. 

[0125] File manipulation is explained further. Actuation of the beginning of these 
actuation is mounting actuation. In a UNIX operating system, mounting adds the tree of a 

name to the name space of an operating system. In the desirable example, the version of 
mounting realized by lib.3d includes the mode made to add to the user level name space 
405 by using the subtree of the front end name space 801 as the duplicate tree 805. 
[0126] When mounting is used in this mode, a path name argument is a path name of the 
root of a subtree 803 added to the user level name space 405. This function adds a subtree 
803 to the user level name space 405 by adding this entry to the duplicate tree 1015 by 
creating the duplicate tree entry 1017 about this path name. Moreover, unmounting 
actuation of deleting the duplicate tree entry 1017 which has the specified path name 
from the duplicate tree 1015 also exists. 
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[0127] When the application process 503 performs opening actuation to the file in the 
duplicate tree 805, the opening function in lib. 3d creates the file descriptor cache entry 
1029 about the newly opened file, and transmits an opening message to the back-end log 
process 716. This opening message contains the path name in a main system 511, device 
identifier, and inode identifier of the opened file. 

[0128] If this message is performed with the system call engine 715, an entry 901 will be 
created on the back-end map 5 1 7. A path name 1 1 3 is used in order to discover the file in 
the back-end system 5 1 3 corresponding to the file opened with the main system 511. The 
corresponding file descriptor of a file is arranged at the back-end file descriptor 1111. 
[0129] If opened by the file, in order to identify a file, a file identification child will be 
used for the file manipulation in a main system 511. The message for the actuation to the 
backup file in backup system 513 of corresponding uses a device identifier and an inode 
identifier, in order to identify a file. In order to perform such a message, the system call 
engine 715 should just access the entry in the opening duplicate file list 1117 about the 
device and inode which were specified within the message. This entry includes the file 
descriptor 1111 required to perform backup system 513, 

[0130] When the application process 503 closes the file in the duplicate tree 505, a lib.3d 
closing function is determined fi*om Status field 1033 about whether the child process is 
using the file. When the child process is not using the file, a closing function makes an 
invalid the file descriptor cache entry 1029 about the file in the duplicate tree 505, and 
transmits the closing message containing a device identifier and an inode identifier to 
backup system 513. 

[0131] When the system call engine 715 performs this message, in order to find the entry 
1 1 19 of this file, a device and an inode identifier are used. Subsequently, the file in 
backup system 513 is closed using the back-end file descriptor 1111 for identifying a file, 
and, finally an entry 1 1 19 is deleted from the opening duplicate file list 1117. 
[0132] As mentioned above, although an example of the formation approach of a user 
level backup file system and operation has been explained to a detail, it is clear to this 
contractor that various examples of modification of the user level backup file system of 
this invention are realizable. For example, it reflects that a desirable example is realized 
by the system which performs a UNIX operating system, and much details of a desirable 
example are realized by the system which performs a UNIX operating system, other 
operating systems — it is, and these details are changed when realizing. 
[01 33] Similarly, the common library system used with the operating system of Sun is 
used for a desirable example. Other examples use the configuration of others of the 
library linked dynamically. Furthermore, the thing and functional target which were 
indicated by this specification can also be made to realize the DS indicated on these 
specifications, and a message by many of approaches of equivalent others. 
[0134] Furthermore, it passes over a user level backup file system only to an example of 
the operation of the alternate library where it was dynamically linked for changing the 
behavior of a process, without changing the application program currently performed 
according to the process. This same technique can be used also in order to define 
different user level name space, for processes from the name space given to the process by 
the operating system, and not only file backup but other services can be used for it also in 
order for user level name space or an operating system to add to the name of which entity 
of the name space given to a process. 
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[0135] 



[Translation done.] 
TECHNICAL FIELD 



[Industrial Application] This invention relates to a computer system. Furthermore, this 
invention relates to the technique used with the application programme level of a system 
at a detail, in order to correct the effectiveness of the call performed to the operating 
system. 



[Translation done.] 
PRIOR ART 



[Description of the Prior Art] The computer system is hierarchized. In a typical system, a 
hierarchy includes the hardware (for example, communication media to which a 
processor, memory, large capacity storage, and these components are made to link) of the 
lowest layer. The following layer is an operating system. An operating system controls 
actuation of hardware and defines a series of logical devices. The actuation in a logical 
device turns into actuation in the hardware controlled by the operating system. The 
logical device supplied by the operating system is used rather than an operating system 
by the program in the upper layer. These hierarchies are called the user level of a system. 
[0003] The important trouble in the design of a computer system is level by which the 
actuation performed by the system is defined. For example, in order to operate it by an 
operating system's supplying a series of abundant logical devices to an application 
programme level, or supplying a series of small-scale fimdamental logical devices, it is 
expected that a user's application program will combine a fundamental device if needed. 
Also in hardware, this is completely the same. The antinomy on the design in each level 
is the same. 

[0004] Although a series of abundant logical devices simplify programming in the 
following level, the complexity of the level which supplies a logical device increases, 
consequently the overall flexibility of a system falls. When complicated actuation is 
especially performed by the lower layer of a system, these actuation must be performed 
without the benefit of available information by the upper layer. 

[0005] The trouble on the design described here is explained to the detail into the paper it 
is [ JIE dirty SARUZA's and others (J. H.Saltzer) "end-to-end problem in a system 
design" carried on ESHIEMU transactions-on computer systems (ACM Transactions on 
Computer Systems), the 2nd volume, No. 4 (November, 1984 issue), and 277-288 pages ] 
entitled. 

[0006] An example of an antinomy is brought about by the design of a backup file 
system. A backup file system gives a part of another file system or all backup. Since this 
is the system backed up, a backup file system also saves the known file name in [ some ] 
the system backed up instead of **** which saves a file content. The actuation performed 



JP H07- 13751 



19 of 43 



about a file has plentifully the case where it is desirable to repeat also about the file in a 
backup file system. 

[0007] When a backup file system exists, even if an original file system is destroyed or it 
becomes impossible of operation, there is no information lost. Furthermore, since a 
backup file system also saves a name (name) with the contents, a backup file system can 
be immediately used by the program currently used with the broken file system. Needless 
to say, although an application program can always produce the backup file system of 
itself, the desirable solution of a backup file system problem is always an approach that it 
can back up without modification of application. 

[0008] Drawing 1 shows the conventional approach against the design of a backup file 
system. In a multiprocessing computer system, the actuation specified by the program 
performed in an application process is answered, and a file system performs actuation to 
a file. The file system itself is realized using at least one operating system process and 
hardware (for example, disk drive). 

[0009] The relation between an application process and an operating system process is 
the relation between a client and a server. A server process operates it and an application 
process requires that the result of the actuation should be returned to an application 
process. Therefore, in a system 101, the application process 103 requires that the kernel . 
server 113 should perform file manipulation 109. For this reason, the kernel server 109 
returns 111 for actuation as a result of a deed. 

[0010] Needless to say, the kernel server 109 operates it by changing data with a disk 
drive 1 1 7. The interfaces between a disk drive 1 1 7 and the kernel server 1 1 3 are the 
components of the kernel server 113 called the characteristic driver 1 15 to the disk drive 
1 17 of a predetermined type. 

[0011] In the Prior art, the backup file system was realized in the hardware level 119 and 
the operating system level 107. In the system 101 of drawing 1 , it realizes in the 
hardware level 109. Although a disk drive 117 appears as a usual disk drive to a server 
1 13, it includes the mirror disk 1 19 (a) and 119 (b). 

[0012] Each file has the copy of both disks and actuafion of changing a file is performed 
to the copy of each disk. Therefore, each disk includes the copy of a file system. Even if 
one side of a disk breaks, the system of other disks is still available. Needless to say, the 
special fault of a system 101 is needing specific hardware. 

[0013] The backup file systems 121 and 123 are realized with an operating system level. 
A system 121 has two non-mirror disks 123 (a) and 123 (b). Each disk has a separate 
driver 1 15 (a) and separate 1 15 (b). When a server 1 13 performs file manipulation, such 
as creation of a file, deletion, or other modification, a driver 1 15 (a) makes this actuation 
carry out to drive 1 23 (a), and a driver 1 1 5 (b) makes this actuation carry out to drive 1 23 
(b). 

[0014] As a result, the ID copy of a file system exists in drive 123 (a) and drive 123 (b). 
Although a system 121 does not need special hardware any longer, the changed operating 
system is still required for it. Furthermore, since a change must be made about a driver 
1 15 (a) and (b), this change must be made in the lowest layer of the kernel server 1 1 3. 
[0015] Although the backup file system 123 also has two non-mirror disks 123 (a) and 
123 (b), each disk is driven by the separate servers 125 and 127. A server 125 performs 
file manipulation 109 about the 1st disk 123 (a). When this file manipulation is creation 
of a file, deletion, or other modification, a file manipulation message also transmits a 
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server 125 to the backup server 127. And the same file manipulation is performed after 
that. 

[0016] Consequently, the copy of the file system currently actually used by the 
appHcation process 103 exists in both disk drives 123 (a) and 123 (b). Generally the 
backup file system 123 is realized by the distributed computer system including many 
component computer systems 131. In such a system, although the application process 
103, the kemel server 125, and a disk drive 123 generally exist in one component system 
131 (a), the backup server 127 and a disk drive 123 (b) exist in another component 
system 131 (b). 

[0017] What is necessary is just to change a server 125 like a system 121, so that a 
message may always be sent to a server 127 when changing the file about the application 
process 103 although a system 123 needs modification of an operating system. The 
backup server 127 answers this message by the completely same approach as answering 
file manipulation 109 fi-om other processes about the component system 131 (b). 
[0018] Although systems 101,121 and 123 are all effective in creation of a backup file, 
these all have a serious defect. These systems need one of the modification of special 
hardware or an operating system, consequently do not become a pocket mold the 1st. 
{0019] The computer system by which these systems should be performed must gain 
these components, when it does not have special hardware or a special operating system. 
Furthermore; once a system 101,121 or 123 will be in a busy condition, all the computer 
systems for a shifl: must have special hardware or a special operating system. 
[0020] Since systems 101,121 and 123 operate [ 2nd ] with a hardware level 109 or the 
operating system level 107, all files appear to these systems equally, and these systems 
only back up all the files changed according to the application process 1 03. 
[002 1 ] However, generally there is no need of backing up all files. When the file in a 
UNIX (trademark) operating system was analyzed, it became clear that 50 - 60% of the 
file in a file system was a temporary work file which has only the life of under a for [ 3 
minutes ] . In many cases, there is no need that almost all the things of these files back up. 
[0022] However, the method of identifying these files to the kemel server 113 does not 
exist. It is waste of a system count resource and a system storage resource to perform 
needless to say and unnecessary backup. 

[0023] Unnecessary backup is the special example of the aforementioned general 
problem. The information about this actuation is no longer used for a system, so that it 
will be carried out, if actuation is performed from a user. As shown by the example of 
backup, a result will be almost unexceptional and will be called inefficient use of a 
system resource. 



[Translation done.] 

EFFECT OF THE INVENTION 



[Effect of the Invention] As explained above, according to this invention, the backup file 
system which can be used without changing an application program, an operating system, 
or hardware is obtained. 
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TECHNICAL PROBLEM 



[Problem(s) to be Solved by the Invention] Therefore, the purpose of this invention is 
offering the system which can perform actuation with useful User Information without 
modification of an application program on user level. 

[0025] Another purpose of this invention is offering the backup file system which can use 
the advantage of User Information about the file which can operate on user level, can 
carry, and should be backed up. 

MEANS 



[Means for Solving the Problem] The aforementioned trouble is solved by the user level 
backup file system of this invention. The backup file system of this invention is 
transposed to a series of library routines to which actuation of a series of standard library 
routines is emulated, and a backup file system also processes a series of standard library 
routines which supply a file command to a kernel server. When an application program 
specifies actuation of changing a file, the alternative library routine for this actuation 
performs this actuation. 

[0027] An alternative library routine performs two actions. That is, the message which 
specifies the actuation which a kernel server is rnade to perform assignment actuation, 
and is actually performed by the kemel server is supplied to the user level back-end 
server in another computer system. Subsequently, a user level back-end server supplies 
the file manipulation specified by this message to the kemel server in other computer 
systems. 

[0028] Therefore, creation and maintenance of a backup file become the side effect of the 
file manipulation performed by the alternative library routine. All the components of a 
backup file system exist in user level, and it can be used by all the systems that can 
perform a routine further in an alternate library by the ability using this system, without 
changing hardware, an operating system, or an application program, since an alternative 
library routine emulates the library used from the first by the application program. 
[0029] Another advantages of the user level backup file system of this invention are 
which file being backed up and performing the client process 303, in order to specify. 
This assignment is performed by duplicate tree DS. This duplicate tree DS specifies the 
part of an accessible file system as the client 303 which includes the file which should 
back up. 

[0030] The code in the library routine which emulates file manipulation checks duplicate 
tree DS, in order to determine whether to be that by which the file at the time of a library 
routine performing actuation should be backed up. When it should be backed up and 
actuation changes [ and ] a file, the message which includes file manipulation is 
transmitted to a back-end server process. 

[0031] In order to enable user level redefinition of the functionality offered by the lower 
layer of a computer system, generally the combination of the library routine which 
specifies the side effect of the actuation to a certain kind of entity, and which entity has 
received the bad influence according to the side effect and the DS to specify is used. For 
example, a user level logic file system can be defined, and this technique can be used 
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although the map of the user level logic file system is carried out to the file system 
offered by the operating system. 



[Translation done.] 
EXAMPLE 



[Example] Hereafter, this invention is explained concretely, referring to a drawing. 
[0033] Interface modification by use of a library: The computer system is hierarchized as 
the drawing 2 above explained. Each class forms an interface to the following upper 
layer. The upper layer responds for the interface of a lower layer needing, and specifies 
the actuation which should be performed by the lower layer. When the upper layer does 
not suit the interface needed by the lower layer, an adapter layer must be added between 
the upper layer and a lower layer. 

[0034] The purpose of an adapter layer is translating the operating specification created 
according to the interface expected with the upper level into the operating specification 
for which it is needed by the interface of a lower layer. For example, an MSDOS 
operating system can be made to consider, if this technique is used as if it was the 
computer which performs a UNIX operating system for ****** PC to that user. 
[0035] When an adapter layer is needed very much by many application programs, this is 
often realized as a series of library routines. As this name suggests, a library routine is a 
routine with which the user of a computer system is provided, in order that the 
manufacturer of the subsystem of a computer system may use it with an application 
program. 

[0036] Drawing 2 shows the operation of the library routine for creating an adapter layer. 
A user program 201 has an interface 206 to the next hierarchy (they are a series of system 
routines in this case). However, the system routine in the computer system for which a 
user program 201 should be used has an interface 213. The difference between an 
interface 206 and an interface 213 is shown by when the configurations of a continuous 
line which show each interface differ in drawing 2 . 

[0037] An adapter layer consists of a library routine 207. A library routine 207 has the 
interface 206 for the following layers of the high order needed by the user program 201 , 
and the interface 21 3 for the low-ranking following layers needed by the system routine 
205. An interface actually consists of a fimction (function or function) call. By generating 
the function call needed by the interface 2 1 3, the routine in a library routine 207 answers 
the function call 203 needed by the interface 206, operates, and performs actuation 
specified by the function call 203. 

[0038] As shown by the arrow 21 1, a system routine returns the activation result to a 
library routine 207, and after the system routine 2 1 5 is completed, subsequentiy a library 
routine 207 returns a result to a user program 201 , as shown by the return 205. 
[0039] When generating the activation code of the interface redefinition user program 
201 by use of the library routine linked dynamically, the usefulness of the library routine 
concerning redefinition of an interface with the conventional system by the fact of having 
to make a library routine Unk to a user program 20 1 was low. 
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[0040] "Linking'' here is processing which relates a call of the library routine in a user 
program 201 to the location of the library routine in the copy of a library routine 207. 
Since it had to hnk when an executable code was generated, the user who has only the 
copy of an executable code was impossible for transposing a certain hbrary routines 207 
of a series of to a series of another library routines 207. 

[0041] The computer system which can make a library routine link to a user program 
dynamically was developed by this invention. In such a computer system, when the 
process which performs a user program is loaded to the memory of a computer system 
before activation, linking is performed. 

[0042] By dynamic linking, a certain library routines of a series of can be transposed to a 
series of another library routines, without changing the object code of a user program, 
and, thereby, the behavior of the system by which a user program is operated can be 
changed. The explanation about djoiamic linking is indicated to "the common library 
(Shared Libraries)" published in May, 1988 from Sun Microsystems, Inc. which does the 
whereabouts to Mountain View of the U.S. and California. 

[0043] Drawing 3 shows how to change the behavior of a system using dynamic linking. 
In a system 1301 , an user process 307 performs the application program 309 with which 
the operating system library 1315 was combined dynamically. The operating system 
library 1315 supplies an interface to the application program 309 shown in call 311 and 
return 313 list by the return 319 from the user call 317 to the kernel server 305, and the 
kernel server 305, in order to perform actuation specified by call 311. 
[0044] In a system 2, an user process 307 performs the same application program 309, 
and uses the same kernel server 305. However, the operating system library 2321 is used 
instead of the operating system library 1315 in this case. All the things that the operating 
system library 1315 performs perform the operating system library 2321. However, the 
operating system library 2321 generates a side effect 323 further. 
[0045] Therefore, it being the need in order to change it into the system 303 which also 
generates a side effect 323, although behavior of the system 310 is carried out like a 
system 301 is only making the operating system library 2321 link to a user program 309 
dynamically instead of the operating system library 1315. 

[0046] Creation drawing 4 of the user level name space by using the library linked 
dynamically shows how to control a side effect 203 using the approach of creating user 
level name space using the operating system library 403 linked dynamically, and this user 
level name space. The entity in the computer system of a function, a file, a device, etc. is 
quoted in a program with a name. 

[0047] Therefore, the function of the name space of a computer system is relating the 
name used in a program to the entity shown with this name. In the conventional computer 
system, the name space used by the user program is created by the operating system, and 
is held. In the system 401 of this invention, the operating system library 403 creates and 
holds one or more user level name space for user-process 409. 

[0048] The one approach of using the user level name space 405 by the library routine 
403 is creating the user level logic file system with which the file system with which a 
user program's 309 is supplied by the kernel server 305, behavior, and structure differ 
from these both. This logic file system can be used in order to control a side effect after 
that. 

[0049] For example, a side effect 323 needs a system 401 a backup file system disk **** 
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case to generate a backup file system, and the user level name space 405 specifies which 
file in the file system supplied by the kernel server 305 should be backed up in a backup 
file system. User level name space is a part of environment of an user process 409 so that 
clearly from drawing 4 . 

[0050] A general view of a user level backup-file system: In order to form the user level 
backup file system which backs up automatically only the specific file of the files 
changed according to the application process which performs drawing 5 and the drawing 
6 application program, the aforementioned library and the user level name space which 
were linked dynamically can be used. 

[0051] Drawing 5 shows such a user level backup file system 501 . A system 501 is 
realized by two computer systems, a main system 511 and backup system 513. A main 
system 511 performs the application process 503, and backup system 513 holds the 
backup copy of the file changed according to the application process 503. A main system 
5 1 1 and backup system 5 1 3 are connected by the communication media which can 
transmit the message fi-om the process performed with a main system 5 1 1 to the process 
performed with backup system 513. 

[0052] The components of the system 501 in a main system 511 are the application 
process 503 and the kernel server 305 (a). The kernel server 305 (a) supplies a file system 
to a main system 51 1 . In drawing 5 , although a file system is shown by the local disk 307 

(a) to a main system 511, this file system can also be a remote file system arranged 
together with another system. 

[0053] In any case, the kemel server 305 (a) performs file manipulation to a file system, 
and call 3 1 7 is answered from the application process 503, a result 3 1 9 is retumed to a 
process 503, and, as for a file system, the file system itself performs required actuation to 
a disk 307 (a). In order to perform file manipulaUon in the kemel server 305 (a), the 
application process 503 uses the library in which a dynamic link is possible. 
[0054] This library is permuted in a main system 51 1 by the new library called lib.3d507. 
A library 507 answers call 317 and the file manipulation which changes a specific file 
also by transmitting the backup message 5 1 2 by supplying the proper call 3 1 7 to the 
kemel server 305 to backup system 513 is specified. The file which transmits the backup 
message 512 by modification is specified in the front end duplicate tree (FRT) 505. 
[0055] The fi-ont end duplicate tree (FRT) 505 is held by the routine in lib.3d507, and is 
used so that it may be shown by the arrow 506. Therefore, the duplicate tree 505 defines 
the user level logic file system which consists of a file which produces modification of 
the backup file in a system 5 1 3 by modification. 

[0056] The component of the system in backup system 513 is the standard file system, 
server and disk drive the back-end server 5 1 5, a user level process, the kemel server 305 

(b) and a disk 307 (b), and for backup system 513. The kemel server 305 (b) supplies a 
file system to the back-end server 517, The data about a file system are memorized by the 
local disk 307 (b) in drawing 5 . However, it is also memorizable to a remote system. 
[0057] The back-end server 515 performs file manipulation to the kemel server 305 (b) 
by call 317, and receives the result of a call from a server 305 (b). The back-end server 

5 1 5 holds the back-end map 517. This back-end map 5 1 7 carries out the map of the file 
specified with the back-end duplicate tree 505 to the file in the file system of backup 
system 513 which serves as these backup. In the example which has the name space 
where the file system generated by the file system and the kemel server 305 (b) which 
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were generated by the kernel server 305 (a) is the same, the back-end map 5 17 is 
unnecessary. 

[0058] The approach of a system 501 of operation is shown in drawing 6 . Drawing 6 is 
the general-view Fig. of the gestalt of the routine 601 in the Hbrary 507 which changes a 
file. The routine name 603 and argument 605 which a routine has are the same as that of 
the name of a ftmction and argument which are used for performing file manipulation in 
the Hbrary permuted by the library 507. Therefore, a call of this routine in an application 
program 509 calls a routine 601 . 

[0059] After performing all things to be prepared, a routine 601 makes the same file 
manipulation as the routine permuted by the routine 601 perform to the kernel server 305 
(a). If actuation is successful, it will be determined whether it is shown that a routine 613 
is that to which the file by which a call and the front end duplicate tree 505 are changed 
should back up a function 613 with the name of a file changed. When the front end 
duplicate tree 505 shows such, a function 615 sends the message 512 which has an 
argument 6 1 7 to backup system 513. 

[0060] This message requires that backup system 513 should perform actuation to the 
completely same backup file system as the actuation performed with the file system 
supplied by the server 305 (a). After sending a message, the return of the routine 601 is 
carried out. When a file does not exist in the front end duplicate tree 505, or also when 
the actuation specified by the function 607 is not successful, the return of the routine 601 
is carried out. 

[0061] The section of the code to which the sign 61 1 was given in drawing 6 specifies a 
side effect (in this case, message 5 1 2). The description of a routine is sending a message 
512 to backup system 513, only when file manipulation is successful with a main system 
511. It is because it is not necessary to back up unsuccessful actuation. 
[0062] Generally there are two gestalten in the file manipulation in a system 501. It is 
changing user level name space 405, and another is a thing for which one is realized by 
the front end duplicate tree 505 and the back-end map 517 and which do not change. 
Actuation of the 2nd gestalt is the writing to the file specified in the front end duplicate 
tree 505. The write-in function in lib.3d507 has the same interface as the write-in 
function in the library permuted by lib. 3d. <BR> [0063] In the desirable example, as an 
argument, this function has the integer which shows the size of the pointer and the write 
data-ed to the file descriptor of the integer used by the kernel server 305 (a), and the 
buffer containing a write data-ed, in order to identify a file. If it requires that the write-in 
function in lib. 3d should perform a system write-operation to the file as which the kernel 
server 305 (a) was specified by the file descriptor and actuation is successful, it will 
confirm whether the file from which the function was discriminated by the file descriptor 
exists in the front end duplicate tree 505, and if it exists, a function will send the write-in 
message 512 to the back-end server 515 in backup system 513, and will carry out a 
return. 

[0064] A message includes information required to perform correctly the write-operation 
in the backup file system performed by the system write-operation in the file system 
which identified the file written in by the kernel server 305 (a), and was supplied by the 
kernel server 305 (a). If the back-end server 515 receives a message, the back-end server 
515 will determine the file descriptor which uses the back-end map 517 and the kernel 
server 305 (b) uses for backup files, will use a system [ which was supplied by the kernel 
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server 305 (b) after that ] write-in function, and will perform the write-operation to a 
backup file using the data and positional information which were given into the message. 
[0065] The simple case of actuation of changing the user level name space 405 is file 
deletion. A deletion function confirms whether it is necessary to delete the information 
about the deleted file fi-om the front end duplicate tree 505, and if, as for the deletion 
function supplied by lib.3d, it requires that the kernel server 305 (a) should delete a file 
first and this delefion is performed, when it is necessary to delete, a deletion function will 
delete this information. 

[0066] Next, a deletion function sends and carries out the return of the message required 
for deletion to the back-end server 515. If the back-end server 515 receives this message, 
a deletion function will arrange a file on the back-end map 51 7, it will require that the 
kernel server 305 (b) should delete this file, and all actuation to the back-end map 517 
needed for coincidence by this deletion will be performed. 

[0067] A much more complicated example is renaming. Renaming of the file in the file 
system supplied by the kernel server 305 (a) can have the result which has the following 
three possibility in the user level name space 405. 

[0068] ** The original name of a file is a part of user level name space 405, and when a 
new name is also a part of user level name space 405, a file remains in the user level 
name space 405. 

[0069] ** The original name of a file is not a part of user level name space 405, and when 
a new name is not a part of user level name space 405, either, a file is added to the user 

level name space 405. 

[0070] ** The original name of a file is a part of user level name space 405, and when a 
new name is not a part of user level name space 405, a file is deleted from the user level 

name space 405. 

[0071] In the 1st case, the renaming funcfion of lib. 3d requires that the kernel server 305 
(a) should rename with the file system. Subsequently, it confirms whether the renamed 
file exists in the user level name space 405, and if it exists, since this renaming is 
reflected, a renaming function will change the front end duplicate tree 505, and will 
require and carry out the return of the renaming [ in / for a message / delivery and there ] 
to the back-end server 515. Needless to say, this message includes an old and new path 
name. If the back-end server 515 receives a message, a server 515 will require renaming 
of the kernel server 305 (b). 

[0072] In the 2nd case, a renaming ftmction requires renaming from a server 305 (a), and 
the file renamed as mentioned above confirms whether exist in the user level name space 
405. However, in this case, a renaming fimction deletes the information on a renaming 
file from the front end duplicate tree 505, and sends and carries out the return of the 
message to the back-end server 515. The message to the back-end server 5 1 5 is a deletion 
message of a file. Answering this message, the back-end server 515 makes the kernel 
server 305 (a) delete a backup file. 

[0073] In the 3rd case, a renaming function requires the again above renaming. However, 
two kinds of messages must be sent in this case. It requires that the 1 st message should 
create the file which has the name of a file moved to the user level name space 405 in 
backup system 513, the kernel server 305 (b) creates this file, and the back-end server 
515 answers this message by requiring that the entry of this file should be created on the 
back-end map 5 1 7 after that. Then, when delivery and the back-end server 5 1 5 write the 
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write-in message which has the current contents of the file by which the renaming 
function was moved to the user level name space 405 in the kernel server 305 (b) and 
make those contents write in the backup file in backup system 513, this write-in message 
is answered. 

[0074] The single actuation performed by the kernel server 305 in a main system 511 (a) 
requires making actuation of a single string [ server 7 515/ back-end / server / 305 / (b) / 
kernel ] perform so that clearly from the aforementioned explanation. Furthermore, the 
back-end map 5 1 7 and the front end duplicate tree 505 are in the always same condition 
at the time of termination of the actuation performed by the function in Iib.3d507 so that 
clearly from the aforementioned explanation. 

[0075] Implementation of a desirable example: Drawing 7 - 1 1 drawing 7 is the block 
diagram of the desirable example 701 of a user level backup file system. This desirable 
example is realized by the system by which a certain processor performs SunOS4.1 
version of a UNIX (trademark) operating system, and other processors perform MIPS4.5 
version of a UNIX (trademark) operating system. Two component groups exist in a 
system 701 . One group performs backup file actuation and the group of another side uses 
a system 701 as a fault-tolerant (error permission) system. The following publication 
explains first the component which performs backup file actuation, and, subsequently 
explains the component which gives fault tolerance. 

[0076] When explanation is begun from a main system 5 1 1 , the application process 503 
has an application program 509, library lib.3d507 (this function performs backup file 
actuation as a side effect of file manipulation) which can be linked dynamically, and the 
front end duplicate tree (FRT) 505. File manipulation is performed by the kernel server 
305 (a) by the system 511. The message generated by the function in a library 507 is 
conveyed by backup system 5 1 3 with a pipe 710. 

[0077] A pipe 710 is supplied to the application process 503 by the pipe process 711, and 
pipe process 711 the very thing communicates with the application process 503 with a 
pipe 709. The pipe process 71 1 supplies the single pipe 710 so that it may explain to a 
detail further below. A pipe 710 is used by all the application processes 503 that create 
backup with backup system 513. 

[0078] When continuing backup system 513 in a desirable example, the back-end server 
515 is divided into two processes (BLP) 716, i.e., a back-end log process, and the system 
call engine (SYSCALL ENG) 715. In order that both may perform file manipulation, the 
kemel server 305 (b) is used. The file system maintained by the kernel server 305 other 
than a backup file (b) includes a log file 703 (b). 

[0079] The actuation is as follows. When the engine performance of file manipulation 
arises by activation of the application program 509 which acquires the file identification 

child who specifies a pipe 710 from the pipe process 71 1 when the application process 
503 is initialized, the function of the actuation in lib.3d507 makes the function to the file 
system supplied by the kemel server 305 (a) perform to the kemel server 305 (a), and 
transmits a message to backup system 5 1 3 through a pipe 7 1 0 further. 
[0080] A message will be received by the back-end log process (BLP) 716 if a message 
reaches backup system 513. The back-end log process 716 carries out the log of the 
message to the log file 703 (b) in the file system supplied by the kernel server 305 (b). 
When a log file 703 (b) has a message in a file, a message is always read with the system 
call engine 715 in order of arrival. 
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[0081] In the desirable example, the back-end map 517 belongs to the system call engine 
715. According to the system call engine 7 1 5 reading a message, the system call engine 
715 makes the file manipulation for which the kernel server 305 (b) was asked by the 
message perform, and system call engine 715 the very thing responds for asking by the 
message, and holds the back-end map 517. 

[0082] As for error permission actuation of the error permission actuation system of a 
system 701, an error's being detected and the detected error need to answer a system by 
the approach of continuing actuation. In the desirable example, detection of an error and 
the response to this detection are processed by WatchD (user level system which creates 
distributed-system error permission). 

[0083] WatchD can be set to the international congress about the 23rd fault-tolerant 
computing held in Toulouse of the France country June 22, 1993 - 24. Software with 
which Hugh Anh, a wye (Huang, Y) and KINTARA, and "fault tolerance of C (Kintala, 
C) were realized: A technique and experience (Software Implemented Fault Tolerance: ) 
the [ Hugh Anh for whom it applied on Technologies and Experiences" and September 
30, 1992, and / of a wye (Huang, Y) / United States patent application ] - a No. 
07/954,549 specification (name [ of invention ]: - the equipment for fault-tolerant 
computing ~) And it is explained to the approach at the detail, 
[0084] What is necessary is just to understand that a WatchD system includes one 
monitor process over each node of a library and a distributed system called libft in 
explanation of this invention, libft includes the routine which performs checkpoint 
actuation in which the field of the routine which specifies the field of the memory for the 
routine which performs actuation in which a process is registered into WatchD, and an 
auto backup, and these memory receives. A monitor processes the monitor user process 
registered also into WatchD and both monitors. 

[0085] If a monitor detects that the failure occurred in the process registered into the 
monitor, a monitor will restart the process. When a process is restarted by the libft 
fiinction, a process determines what happened. In the process which carries out the 
monitor of the user process to a certain node of a distributed system, a monitor moves the 
copy of important data (determined when this also uses a libft function) to another node 
of a distributed system. 

[0086] When a failure occurs in the node of a monitor, the monitor of the node of another 
side detects this failure, and restarts the user process of the node of another side using the 
present copy of important data. When a failure node is restored, the monitor restarts an 
user process using the critical information from the node of another side. And the 
message which shows that the user process was restarted is transmitted. If the monitor of 
the node of another side receives this message, the node of another side will end the user 
process performed by that node. 

[0087] Generally, a WatchD monitor is arranged annularly and each monitor carries out 
the monitor of the monitor of the endocyclic next door. Before it becomes impossible for 
the number of the monitors which receive the number of endocyclic nodes and the 
important copy of data of an user process to restart the user process registered into 
WatchD, it detemiines how many piece failure of the node of a distributed system must 
be carried out. 

[0088] In the desirable example, a main system 5 1 1 and backup system 5.1 3 have a 
WatchD monitor, respectively. The relation between a monitor and the component of a 
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system 701 is shown by the dotted Hne 721 . The monitor for main-system 5 11 is a 
monitor 717. As shown by the dotted line 721, a monitor 717 supervises the monitor 719 
in the pipe process 711 , the front end log process 705, and a system 5 1 3. A monitor 719 
supervises a monitor 717, the system call engine 715, and the back-end log process 716. 
[0089] As shown in drawing 7 , a system 717 can deal with the failure in the front end log 
process 705, the pipe process 71 1, the system call engine 715, and the back-end log 
process 716, and the failure of a system 513. The design which has two parts of the 
system 701 which gives fault tolerance (error admissibility) has the following two main 
purposes. 

[0090] ** About the engine performance, that the overhead of failure recovery is 
certainly small, ** failure, and failure recovery are certainly transparent to application, 
and activation application should not be stopped by any means. 

[0091] The failure method of recovery is based on assumption that it is the component 
which WatchD can trust most within a system. This is because WatchD performs a very 
easy task and the self-healing of it can be carried out after failure generating. 
[0092] Next, recovery from the failure of backup system 513 is explained to a detail. 
Recovery from the failure of other processes is also surveyed. If explanation is begun 
from the failure of backup system 513, in such a case, a system 701 will operate as 
follows. If a monitor 717 detects the failure of a system 513, the pipe process 71 1 is told 
about a monitor 717, the pipe process 71 1 will create the front end log process 705, and it 
will transpose the file descriptor of a pipe 710 to the file descriptor of the pipe 707 to the 
front end log process 705. 

[0093] If the message function used by the application process 503 detects the failure of a 
pipe 710, this message fiinction will require the new file descriptor for pipes 710 from the 
pipe process 711. The pipe process 71 1 gives the file descriptor of the pipe 707 combined 
with the front end log process 705 to a message function, and the message transmitted by 
the message function goes to the front end log process 705 instead of the back-end log 
process 716. If the front end log process 705 receives this message, the front end log 
process 705 will arrange this message to the log file 703 in a main system 5 1 1 (a). 
[0094] In the desirable example, a message function detects the failure of a pipe 510 as 
follows. A process 503 uses a TCP-IP protocol and transmits a message to a pipe 701. In 
this protocol, only when a precedence message is received, the following message can be 
transmitted. Therefore, the message function used by the function in a library routine 507 
transmits a message to a pipe 710 by transmitting two kinds of messages, i.e., the Shinsei 
message, and a dummy message. When a message function can transmit a dummy 
message, the Shinsei message reaches. If the failure of a system 513 occurs, the message 
transmitted through a pipe 710 does not reach and a dummy message cannot transmit it, 
either. 

[0095] If backup system 513 is recovered, a monitor 719 will make the system call 
engine 715 and the back-end log process 716 restart, and will be notified to a monitor 717 
after that. A monitor 7 1 7 is notified to the pipe process 711. The pipe process 7 1 1 
acquires the file descriptor of a pipe 710, and terminates the front end log process 705. If 
the back-end log process 716 restarts by the system 513, a process 716 will acquire the 
copy of a log file 703 (a) from the kernel server 305 (a), and will add this copy to a log 
file 703 (b). Then, the system call engine 715 resumes activation of the message in a log 
file 703 (b). 
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[0096] The message function used by lib.3d is the same approach as the approach of 
acquiring the file descriptor about a pipe 707, and acquires the file descriptor about a pipe 
710. Next, if it tries to use the file descriptor of a pipe 710 in order that a message 
function may transmit a message, this attempt will go wrong and, as for a message 
function, a pipe file descriptor will be again required from the pipe process 711. Shortly, 
a message function receives the file descriptor of a pipe 710, and is again connected to a 
back-end log file. 

[0097] The remaining fault condition is processed as follows. 

** The failure monitor 717 of the pipe process 722 detects this failure. The newly 

restarted process searches the connection with a pipe 710 from the process condition 

saved by WatchD. Other processes do not notice this failure and recovery. 

[0098] ** The failure monitor 719 of the system call engine 715 detects this failure, and 

makes the system call engine 715 restart. The newly restarted system call engine 715 is 

recoverable from a foreign file to the precedence checkpoint condition with the 

checkpoint and recovery function which are given by libft. Other processes do not notice 

this failure and recovery. 

[0099] ** The failure monitor 719 of the back-end log process 716 detects this failure, 
and makes the back-end log process 716 restart. A process 716 restores the condition 
from a checkpoint file. A monitor 719 notifies fiirther that the back-end log process 716 
was restarted to a monitor 717, and, subsequently to the pipe process 711, notifies a 
monitor 717. Then, a process 71 1 connects a pipe 710 to the new back-end log process 
716. The next store of each application file and lib. 3d acquires new cormection from the 
pipe process 711. 

[OiOO] ** As for the failure of the failure front end log process 705 of the front end log 
process 705, only the failure nascent state period of a system 513 exists. If a monitor 717 
detects the failure of the front end log process 705, a monitor will be notified to the pipe 
process 711. Subsequently, the front end log process 705 is made to restart, and a pipe 
708 is re-connected to the front end log process 705. The next store of an application 
program 509 goes wrong, consequently the message-sending function in lib.3d acquires 
the file descriptor about the new pipe 708 from the pipe process 711. 
[0101] implementation [ of the user level name space 405 ]: - drawing 8 -11 - in order 
to specify all a series of files from the file system supplied by the kernel server 305 (a) to 
the application process 503, the user level name space 405 can be used. Drawing 8 shows 
the relation between the name space 801 of the file system supplied by the kernel server 
305 (a), and the user level name space 405 in the user level backup file system 701 . 
[0102] In name space 801, a file name is arranged in the shape of a tree. The file which 
forms the leaf (B, D, E, G, I, M, N) of the tree in drawing 8 contains data or a program. 
The remaining file is a list of other files. Such a file is called a directory. Even the name 
of the file which can specify all the files in name space 801 to the kernel server 305 (a) 
with the path name which starts by the root 'V", and is specified with a path name from 
the root includes the name of all files. Therefore, the path name of a file "D" is /A/C/D 
and the path name of a file "L" is /J/K/L. 

[0103] The user level backup file system 701 specifies the file which should back up by 
specifying the subtree of the name space 801 which includes a file. Subsequently, 
actuation to the file in the subtree which changes a file is performed to the backup file in 
backup system 513. In drawing 8 R> 8, it is chosen as what four subtrees, 803 (a), 803 
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(b), and 803 (c) should back up. 

[0104] Therefore, modification to the data files D, E, G, I, and M or N in name space 801 
will produce modification to the backup file of this data file. Similarly, modification to 
Directories C, F, H, and L will produce modification to these backup files. Since all the 
files in a subtree are backed up, the file which should back up is specified with the path 
name of the directory which is the root of a subtree in the user level name space 405. For 
example, a subtree 803 (a) is specified by a path name / A/C805 (a) in the user level 
name space 405. 

[0105] Needless to say, the map of the user level name space 405 must be carried out also 
to the file system supplied with the system call engine 715. This is performed in the back- 
end map 5 1 7. As shown in drawing 9 , the back-end map 5 1 7 includes the entry about 
each open file in the user level name space 405. An entry consists of two parts, the user 
level name space information 903 and the backup system information 905, of 513. 
[0106] The user level name space information 903 identifies the file in the user level 
name space 405, The backup system information 905 identifies the file in the system 
supplied by the kernel server 305 (b) corresponding to the file identified using user level 
name space information. 

[0107] The back-end map 517 makes it possible to map the subtree of name space 801 in 
the subtree of the name space 907 of the file system which the kernel server 305 (b) 
supplied to the back-end log process 716 and the system call engine 715. This mapping is 
performed by mapping the path name of the root of the subtree of name space 801 in the 
path name of the root of a subtree where name space 907 corresponds. 
[0108] The path name of the root is called the prefix of the path name of the file in a 
subtree. For example, the path name in a subtree 803 (a) has a prefix/ A/C. The path name 
of the file E in a subtree 803 (a) is E. Subtree 909 / Z is made to correspond to a subtree 
803 (a) in name space 907 by mapping a prefix/ A/C in the prefix/Z of name space 907 
from name space 801. After mapping is completed, modificadon of the file specified by 
the path name/A/C/E in name space 801 produces modification of the file specified by 
the path name/Z/E in name space 907. 

[0109] detail [ of the front end duplicate tree 505 ]: — drawing 10 — user level name 
space 405 is realized by the firont end duplicate tree 505 in the desirable example. 
Drawing 1010 is a block diagram showing the front end duplicate tree 505 in a detail. 
Two main components of the fi-ont end duplicate tree 505 are RTREE1015 and the file 
descriptor cache 1027. The path name of the root of the subtree 803 which has the file by 
which RTREE1015 should be backed up is a linked list. 

[0110] The file descriptor cache 1027 is an array which relates a file descriptor to a 
device and an entry (inode) identifier. Therefore, the form of this implementation is as a 

result of the fact that the file system offered by the UNIX operating system identifies a 
tile by the entry (inode) of the identifier of a disk at which is attained to with an integer 
file descriptor and a file resides by three approaches, i.e., a path name, and the file in a 
UNIX file system table. 

[0111] The file descriptor of a file is effective only in the process which opened the file 
again, only while this process opens this file. Although a UNIX file system table enables 
the translation between a device, and inode and the present file descriptor at a path name, 
a device, and the list between inode(s), the direct translation between a path name and the 
present file descriptor is not made possible. 
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[0112] If it explains to a detail further succeedingly, maxtryl003 and initlOOS will be 
used for initialization of the front end duplicate tree 505. Before an initialization function 
gives up maxtryl003, it shows the count tried in order to set up a pipe 710 in backup 
system 513. initl 005 shows whether the pipe was set up or not. The RPROP array 1009 is 
an array of the name 1011 of the actuation which can be performed by the front end 
duplicate tree 505. 

[0113] RTREE PTR1013 is a linked list which includes the pointer of the element of the 
beginning of the RTREE list 1015, i.e., a certain element of each duplicate tree 803. Each 
element 1017 includes the pointer 1023 to the die length 1019 of the path name 1021 of 
the root of the duplicate tree 803, and a path name 1021, and the next element in a linked 
list. The connection server 1025 is a path name in the name space 801 of the pipe 710 to 
backup system 513. 

[0114] The FD cache 1 027 is the array of the file descriptor cache entry 1029. Many 
entries 1029 in this array exist like an available file descriptor to the application process 
503. The index of the entry of the predetermined file descriptor in the FD cache 1027 is a 
file descriptor. While it is shown whether an entry 1029 has an effective entry actually 
and being opened by the file, the application process 503 includes the status flag which 
shows whether a child is borne or not. 

[0115] An entry 1029 also includes the identifier 1 101 of the file residence device in a 
main system 511, and the identifier of inode of the file in a main system 511. The 
effective entry 1029 of each file actually opened by the subtree 803 specified by the entry 

inRTREE1015 exists. 

[0116] The detail back-end map 517 of the back-end map 517 consists of two parts, the 
path name map 1113 and the opening duplicate file list 1117. The path name map 1113 
only carries out the map of the path name in the name space 801 of a main system 51 1 to 
the path name of the name space 907 of backup system 513. Each entry 1 1 15 in a map 
establishes the relation between the front end path name 1117 and the back-end path 
name 1119. 

[0117] The entry which maps the root of the subtree 803 in the front end name space 907 
on the root of the subtree in name space 907 is included by the path name map 1113. The 
back-end path name 1 1 19 is a part of backup system information 905. In the desirable 
example, these mapping is specified in a system configuration file. 
[0118] The opening duplicate file list 1117 includes the entry 1 1 19 of each file which the 
application process 503 opens actually in the duplicate tree 803. The user level name 
space information 903 in an entry 1119 includes the front end file identification child 
(FFID) 1 105 and the front end path name (FP) 1 106. The firont end file identification 
child (FFID) 1 105 consists of the device identifiers and inode identifiers of a file in a 
main system 511. 

[0119] The front end path name (FP) 1 106 is divided into the front end prefix (FPR) 1 107 
and the subtree path name 1 108. The front end prefix (FPR) 1 107 is a prefix of the 
subtree of the file in the front end name space 801 . The subtree path name 1 1 08 is a path 
name of the file in the subtree. The backup system information 905 in an entry 1117 
consists of a back-end file descriptor 1111. 

[0120] The back-end file descriptor 1111 is a file descriptor in the file system supplied by 
the kernel server 305 (b) about this file. In the desirable example, the back-end map 5 1 7 
is realized as a hash table. This hash table can be accessed with both the front end file 
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identification child 1 1 05 and the front end path name 1 1 06. 

[0121] The approach on which the approaches of creating actuation DS 505 and 517 
including DS 505 and 517 and such DS are made to act by various file manipulation is 
explained. In the desirable example, the application process 503 is performed with the 
UNIX operating system which uses a Kom shell. 

[0122] A process enables it, as for a Kom shell, to set up an ENV variable. An ENV 
variable specifies the file performed always, when a process calls a Kom shell. The file 
specified by the ENV variable in the application process 503 builds the fi-ont end 
duplicate table 505, and since it initializes, it contains information required for the 
application process 503. 

[0123] If created, a table 505 becomes a part of address space of the appilication process 
503, and is available to the child process of the application process 503. This child 
process is created by fork system call of a UNIX operating system. Therefore, a child 
process inherits the parents' environment. On the other hand, an exec system call gives a 
new environment to a child process. 

[0124] In order to create the available front end duplicate tree 505 to the child of the 
application process 503 created by the exec system call, lib. 3d has the exec function 
which copies the front end duplicate tree 505 to ENV available about a new process. For 
this reason, even if processes are other points and it is the case where those parents' 
address space is not inherited, lib.3d is available to this process. Even the pipe with a 
name or foreign file for passing the fi^ont end duplicate tree 505 to the child process 
created by exec can be used for other examples. 

[0125] File manipulation is explained further. Actuation of the beginning of these 
actuation is mounting actuation. In a UNIX operating system, mounting adds the tree of a 
name to the name space of an operating system. In the desirable example, the version of 
mounting realized by lib. 3d includes the mode made to add to the user level name space 
405 by using the subtree of the front end name space 801 as the duplicate tree 805. 
[01 26] When mounting is used in this mode, a path name argument is a path name of the 
root of a subtree 803 added to the user level name space 405. This function adds a subtree 
803 to the user level name space 405 by adding this entry to the duplicate tree 1015 by 
creating the duplicate tree entry 1017 about this path name. Moreover, unmounting 
actuation of deleting the duplicate tree entry 1017 which has the specified path name 
from the duplicate tree 1015 also exists. 

[0127] When the application process 503 performs opening actuation to the file in the 
duplicate tree 805, the opening function in lib. 3d creates the file descriptor cache entry 
1029 about the newly opened file, and transmits an opening message to the back-end log 
process 716. This opening message contains the path name in a main system 511, device 

identifier, and inode identifier of the opened file. 

[0128] If this message is performed with the system call engine 71 5, an entry 901 will be 
created on the back-end map 517. A path name 1 13 is used in order to discover the file in 
the back-end system 513 corresponding to the file opened with the main system 511. The 
corresponding file descriptor of a file is arranged at the back-end file descriptor 1111. 
[0129] If opened by the file, in order to identify a file, a file identification child will be 
used for the file manipulation in a main system 511. The message for the actuation to the 
backup file in backup system 513 of corresponding uses a device identifier and an inode 
identifier, in order to identify a file. In order to perform such a message, the system call 
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engine 715 should just access the entry in the opening duplicate file list 1117 about the 
device and inode which were specified within the message. This entry includes the file 
descriptor 1111 required to perform backup system 513. 

[0130] When the application process 503 closes the file in the duplicate tree 505, a lib. 3d 
closing function is determined from Status field 1033 about whether the child process is 
using the file. When the child process is not using the file, a closing Sanction makes an 
invalid the file descriptor cache entry 1029 about the file in the duplicate tree 505, and 
transmits the closing message containing a device identifier and an inode identifier to 
backup system 513. 

[0131] When the system call engine 715 performs this message, in order to find the entry 
1 1 1 9 of this file, a device and an inode identifier are used. Subsequently, the file in 
backup system 513 is closed using the back-end file descriptor 1111 for identifying a file, 
and, finally an entry 1 1 19 is deleted fi-om the opening duplicate file list 1117. 
[0132] As mentioned above, although an example of the formation approach of a user 
level backup file system and operation has been explained to a detail, it is clear to this^ 
contractor that various examples of modification of the user level backup file system of 
this invention are realizable. For example, it reflects that a desirable example is realized 
by the system which performs a UNIX operating system, and much details of a desirable 
example are realized by the system which performs a UNIX operating system, other 
operating systems ~ it is, and these details are changed when realizing. 
[0133] Similarly, the common library system used with the operating system of Sun is 
used for a desirable example. Other examples use the configuration of others of the 
library linked dynamically. Furthermore, the thing and functional target which were 
indicated by this specification can also be made to realize the DS indicated on these 
specifications, and a message by many of approaches of equivalent others. 
[0134] Furthermore, it passes over a user level backup file system only to an example of 
the operation of the alternate library where it was dynamically linked for changing the 
behavior of a process, without changing the application program currently performed 
according to the process. This same technique can be used also in order to define 
different user level name space for processes from the name space given to the process by 
the operating system, and not only file backup but other services can be used for it also in 
order for user level name space or an operating system to add to the name of which entity 
of the name space given to a process. 



[Translation done.] 

DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 11 It is the block diagram of the conventional backup file system. 

[Drawing 21 It is the mimetic diagram showing how a library redefines the interface of a 

user progi*am a . 

[Drawinii: 31 It is the block diagram showing how to redefine an operating system 
interface using the library linked dynamically. 
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[Drawing 4] It is the block diagram showing how to supply user level name space using 
the library linked dynamically. 

["Drawing 51 It is the block diagram of the user level backup file system which uses the 
library linked dynamically. 

[Drawing 61 It is the schematic diagram of the routine in the library linked dynamically. 
[Drawing 71 It is the block diagram of the desirable example of a user level backup file 
system. 

[Drawing 8] It is the block diagram showing the relation of the name space and user level 

name space which are supplied by the kernel server (a). 

[Drawing 91 It is the block diagram showing the relation between user level name space 
and the name space supplied by the kernel server (b). 

[Drawing 101 It is the block diagram showing the structure of the front end duplicate tree 
505. 

[Drawing 1 1 1 1t is the block diagram showing the structure of the back-end map 517. 

[Description of Notations] 

101 The Conventional Backup File System 

1 03 Application Process 

105 User 

107 Operating System 

1 1 3 Kernel Server 

1 1 5 Driver 

117 Disk Drive 

305 Kernel Server 

307 User Process 

309 Application Program 

3 1 5,32 1 Operating system library 

403 Operating System Library 

405 User Level Name Space 

409 User Process 

501 User Level Backup File System 
503 Application Process 
505 Front End Duplicate Tree 
507 lib.3d 

509 Application Program 

5 1 1 Main System 

5 1 3 Backup System 

515 Back-end Map 

517 Back-end Map 

701 User Level Backup File System 

703 Log File 

705 Front End Log Process 

707,709,710 Pipe \ 
7 1 1 Pipe Process 

7 1 5 System Call Engine 

7 1 6 Back-end Log Process 
717,719 Monitor 
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801 File System Name Space 

903 User Level Name Space Information (ULNI) 

905 Backup System Information (BSI) 

907 Name Space 

909 Subtree 
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3 0 5 (a) \c:^\f^xyr-f/^^fiF^no 

^m^i^y^ yy V ^^m-r^. 

[0 0 54] ±^';^'7"A5 1 ir*tt. ^(Dyyf^yV 
lib. 3 d 5 0 7 ^(?ff|x6ff/c/^7^y'7 D 
J:!9Sm^tt5o 7^>^7y 5 0 7ft3-/W3 1 7lCjS 
^L. 3i]E?fc=^-/W3 1 7^:3t;-^/vif->'^3 0 5tc« 

5 1 2^A^;/^rr7^i/7^7^A5 1 3 iZi^Hir ^ Z t 

<i: o r tilt^o :7 7 /v-^^ JE-f 577^ /mYf^m'^ 
i-^o ^iE{-it)/^iy^rs^7^p«>:yfe~i^5 1 2^i^{f 

'r5:77^/Mi:7a>' ha:>'KlgS!:y (FRT) 5 

0 5^cio^/^r^g^^tt^o 

[0 0 5 5] 7DVhni>K1iS{^-yy- (FRT) 5 0 
5fi. ^^5 0 6{Cj:!9^$tL^J:9i-. lib. 3d 
5 0 7{c:foM^5/i-'-^:/|cJ:«9i^l$^n. ;6^o. 

ti5o «eo-c. ^yy-5 0 51^. ^mcx^i^;^T 

A5 1 3lC*5(t5y'«y^Ty7':77-f>'^<^$H^^i:'5 
>^ 7 ^ -'^J^J^ ^ >^J^ 5 if i^^/^§S3a 7 7 ^ x A 

[0 0 5 6] ^<y^T y':f->:^y'Ms5 1 3lCj3ttSV>^ 

'rJ^<D=iyy^—^yh\t. Kif-/^5 1 5, 

if u^y^T^p-t^, ^yi^i^-'/^S 0 5 (b) R 
V^'f-C^^ 3 0 7 (b) , /<yi^ryy'i^y^y'A5 1 3 
ffl(0®?g6^/i77-f/i'->;^"rAif'--/<^UtT'^>^iJ^ Ky 

^yXh^o ^'-^v'V-if— /<3 0 5 (b) 

Kif-y^5 1 7(c>'7^y^i/7;xA<^tt*&i-6o El SIC 

:}oV^r. :7 7>f/i/v;^7"A{i:Blli--57'— 

>r;^i5' 3 0 7 (b) IdlSti^n-So b;6^U ^RIv^^t' 

[0 0 5 7] /^iX^^^-Kifw^S 1 5^1. =1— /U3 1 
7{Cj;f9:i&-^/vif— /<3 0 5 (b) [cMl^Xyr^/^ 
gfef^^m\ ^LT. =i"/V(D^m^i^-^^3 0 5 

(b) t)>b^m't6o y<y^^yh^^-y<5\5ity<y 
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(Dyr-fMc^yy^lr^o ^-/^i^-/^3 o 5 (a) 
3 0 5 (b) [c^r^^^^fifcyr-i^^^yy^'fj^mww:^ 
1 7{i^^-efo5o 

10 0 5 8] i^;=^7'is5 0 1 cDBj{^:^ffi^ll6{c:^-t-o 

5/u-^V^-i^6 0 3^051^6 0 5tl. y-(yy]) 
5 0 7(c«i^^ti.^7-^:^^ y t;l*5v^T:7 7-r/^^^^ 

OiciottS^'^/L'— ^v-coi^ttiJi/w— 6 0 1 
[0 0 5 9] mm:^^'S^^WJ:h(D^±Xfr<>fzm. /^-"f- 
tW\Cyr^^^^^^1o-^^;v^—y<^QS (a) (ctr 

^f)^i)^^'&t^o :7ny h^>'KffiJgi^yi;-5 0 5^5 
S6 1 7^Wf6 7< 5^-^—5:^5 1 2S:/'<5/^Ty7'v';^ 

rA5 1 3fcSIS, 
[0 0 6 0] >;/-fe-v?t:i, f-w^3 0 5 (a) 

ct ^ ttfc 7 r /vi^:^ 7^ T-^T^^^^fc^^^ ^ ± < 
5/ r :y y :7 r ^ yi. v^t; 7^ A {c^-r6^f^^/< V 

^/U;557n V K^M:^ !^--5 0 5 {C#^E Lt^^V^;® 

[0 0 6 1] lI6^^^D^/^-C^-^6 1 li^^H^Mc=i-h* 
(D±i^^^3>itmi^m {Z(Dm'^}t?^y±-i^S 1 2) 
^Jg^-r^o z^-- ^>^to4$ilS:(i. ^i/;^rA5 i ixy 

[0 0 6 2] i^y^'rM.dO iiiC^n^yr-(/i^1^mat 

myV-6 0 5&XJ^y<y ^ ^> h^^ yy" S 1 7(cJ:J9SI 

(DmmW\?L\t. y'DVh:n>'K^ajg-/iJ-5 0 5{C:Jo 
V^Tffi^$tl57r-Y/t^--CC)»5Zi^X*feao 1 i b. 3 



d50 7i,Z:jioi,i6m^yT>'^iya>'\t. lib. 3d 

II C-r >^ -:7 in-;^ SrWf 

[0 0 6 3] »^LV>||J£{?ijT?f^, r(D:7T^^i/3:/ 

(i:?l^<i: ur. y 7^ ^^^mli-^tz.^^\^:^-^/i^D'- 
^<305 (a) lcJ:f)^ffl^tiSll^cDP'r^/wlE3^ 

i^, mm^y'-i^^^^1r^y<yy7{^M'r^^^y^ 

b. 3 d{cioi,i^m^yT>''^iy3:y\t. ^—^^/i^^- 
y<3 0 5 (a) ;55:7r-r/HSiE^ic:j:i9*iS^tifc>^r 

7T:/^-^3>{i7r^/HSai^^l-J:'9iasU 

>'ft#3Zi^ ;/ir-v^5 1 2 ^ T y T'v'J^y^ A 5 1 

[0 0 6 4 ] ;^ :y-t— v^Ji;^— ^>/^'1^-/<3 0 5 (a) 
■9--/-^3 0 5 (a) (::J:t)#^«&$ix^:7r-r/i-i^::^TA 
yy^ /Ui^y^y^ A :Ja 5 ^iZ^^f^^ iE^tCfr 9 O id^^ 

^ni:/ K-^^;/:/5 1 7 ^IS^ffiU. ^<3 0 5 

( b ) ^^y< y^rv -fy r ^/v-ffit-^ffi-r ^ yy^ /H2 

ai^^Srft^L. ^tr. ^(D^. /^3 0 5 

(b) {c:J:«9«*&$ttfcS/;^7^AS52i:7T>'^iy3 >^ 

[0 0 6 5] u-^/i/;!^- A^r^g 4 0 5 ^^jEf 5 
fifefFc^^M?'c^<>'--;^J^7r^/^&JI^T*fc5o lib. 3 

d\z.^^^^^f\.mmyry^'y^y\mmc. ^- 

^/Vf— ^^'3 0 5 (a) •h^y7^^\-^%m^h:Lt^W 

g»JI^ * tLfc 7 T >f /He 5it«^ :7 n y h en K^iS 

[0 06 6] m^. %my r^^^^B i^mm^i^^w^ 

y^—V-f^o Kf— ^^5 1 S^i^r^O^ :yir 

-'y-^^m-r^b^ nmyr:y^i^B:y\ty7^/^^y^ 
^y^ai>'K-7:y:/5 1 7(cga@L. /^'3 0 

5 (b) f)^^z(Dy7 4/^^nm't^:zt^m^L. 
[0 0 6 7] -mmm^j^mmv ^--j^x^ho ^-^-^ 

/V.f— y^3 0 5 (a) {Cj:'9#^*&^tL5>'r^/^v'^x 
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[0 0 6 8] (Dy7-^/^<Djc(D^—J>.f)>=L-^'f\y^;i^^ 

[0 0 6 9] ®y7-<^^(OJt(D^^ — J>st^=^—f\y^;l'^ 

^>ru;^-A^Bg4 0 5(0— S{5-C/^V>^'g', yy^Mt^ 
-^U-<;V^—J>.^W\A 0 5 JCj[jP^bfL5o 
[0 0 7 0] ®y7^^^(r>7t(D^—Msfi^=^—f\^^Jl^:^ 

-</U;^i-i.^rB^4 0 5(^-35 r*3^.^V^i^, y'T^/Hi^ 
-if l/-<y^^-A^rB^4 0 5 7!>-<biyi^^n^o 
[0 0 7 1] ^l(0>Jr-X'C(l, lib. 3d(Oy^^- 
A7r VJi, ^/Ui^— /-^s 0 5 (a) 

CO T -r /^v^^ X ^ y A 9 r t ^^^-t 5o 

^F«14 0 5 {Z^^-i-ht^^t^^:^ y ^ L, ^^E-rtlff. 

{iyDVhic>'Kasi^;^y--5 0 5^'^Mb. p^y-t- 

-/'^S 1 5{i;jt7-^yHh— 0 5 (b) coy^^-A^ 

[0 0 7 2] ||2(7)^~y^-Clt. y A:77>'^ v/g 
V^tti^-- 3 0 5 (a) y^-A^^^U. -eUT 
b9I2(D J:9(cy;!i-A$ti/c>^r-f /u;65^-if u-<>rw^ 

/>'3 0 5 (a) {C/^5/^r S/7':77^/V'trffl^^-t-5o 
[0 0 7 3] ||3C0^-7;-eii. y 4-A:7r>i5' 

yH:S^t/89ie<DJ:5^cey^-A<£rg*:-r6<, L;e>-L. r 

W, 1 ^/ir-v^J^, ^-if u-^/w^- A^r«^ 4 0 5 
^fb $ tiyt 7 r ^ /KO^- A Sr^i" § :7 r ^ y 
TyT'i/J^'rAS 1 3rtlcf^^-r5 r ,1: ^g^ftt. 
i:7:n>K-y'— ^-^5 1 5Ji. ■)j—:^^/V't—/<3Q^ (b) 

Y-ry-fS 1 7(crcD:7T-r>'^0:3ivhy4:f^^i-5- 

y^— A^r^^iJ'v'a ^l^^— A^ 



rpi4 0 b\c^m^Mzy 7 ^ ^^(r)m£<D)h^^^-f^m 

-^/^1^-/^3 0 5 (b) \Z^(Dp^m^^<y^ry':f>^ 

[0 0 7 4] ^m(r>m.m^^hmh:^^fix^\c. ±'y^T 

A5 1 1 (C:Joit5;^— ^>/^f— ^-^S 0 5 (a) iCi<9tT 

t)tl^*-0^f^f^, /<>;/^:n>' Klf-/^5 1 S^^Ij — 
^./Uii— /<3 0 5 (b) (C-iicOj^<^^^T:b-&5r 

b. 3 d 5 0 7{Cio(t5:7r v-aXil^t «9fT^Ptv5 
Sfef^cojil7^{-. /<>yi5^^:/K'^^/7'5 1 7<^:7P>'^ 
^>^ KSS^-v y - 5 0 5 n^izm C^^®-Cfc5. 

[0 0 7 5] Ll/^jlifegllcO^m : H 7 - 1 1 
H 7 Jt^— if u-^/w^ -/ r >y r 4 /^v^^ TJ>^<r>U 

^iSWi: ^5:7^n-^5/1^;65UN I X ®^^^) 

l/"-*^>f V^i/:^y^J^(DS u nOS 4. 1/^— v^a 

si^tu. m(oyu^^y^t-u\^\x im^Mm) ^^^^^ 

— Vi!^ix;^'rA<7)MI PS 4. 5 3 :/$:lltT 

i-'5v^;^xA^||^$tL5o i/;^7"A 7 0 1 ^C^12oO• 
:7T^/^^f^^fTV\ fife*-(DpHV;^xA7 0 1 ^7;*- 

[0 0 7 6] ±i/>^xA5 1 1 ;5^bmp>^^^&i^6<t. r 

>^-v' 3 yT'o-fe;^ 5 0 3 JlTT'y ^-i/B V^u 

>?^7A5 0 9, »6^icy >'i;'^tg/^7>rr?^7 y 1 i b. 

3 d 5 0 7 {^(omWiXyr^)\^Wf^<r>Wi^Wih\.X^^ 
y^rv'fy7>{)\ym^^fsb) mjy^^yV^^yV^ 
my^) - (FRT) 5 0 5^:t-r^o y 7 ^ j\^Wf^\%'y 
;^7^A5 1 ^ywf— ^-^S 0 5 (a) .(c:J:i9 

^Tt5tb5o ^^T'y y 5 0 7|CioJj'5 7T:/^V3 ^-ic 
:yir-v^f:J/^-r7'7 1 ^\cX^^<y^ 
T^^T'v'^^T^AS 1 3|CjS2l$tb^o 
[0 0 7 7] /-^-TT"? 1 Ofiz-^-f T'T'n-fe;^ 7 1 1 fC J: 
•^TT'y ^-V3>'7'p-fe;^5 0 3(C#^^^tl. 

-fn^y^i 1 1 itt:}i^>V:/7 0 gicioryy^-v' 

3 :/ya-fe:;^ 5 0 3 i:il«i-5o TIBT^ic^jatclftB^ 
^^V7'7'^ir^7 1 1 7" 7 1 

O^ttJ&rSo /^^7'7 1 Oli/^^;/i5'T.yyi/;^xA5 

1 3 -c/^ 5^ T 5/ y^^^^si-5^T(7)r 7^ y 3 V 

T^dirT^S 0 3(cJ:«9ffiffi^it5o 
[0 0 7 8] U%\.^^%'M.m\^^^^X^<v ^ r y-f'yy. 
xA5 1 3 ^S^it^^-^^ /^>;/^^:/ K-y— ^^5 1 51^ 

(BLP) 7 1 6 <t^/7.xAl^ffini>'>:/y (S YS CA 
LL ENG) 7 1 5{C53^S»J^tl5o i^;^^'b:7T^^^ 
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mrf^notcMc:^-^/U'f-y<3 0 5 (b) ^ffiffit" 

5 (b) KX.^mn^n^yr^^^^y:^'rMtn^yr 
-{/\^7 0 3 (b) ^^^i-^o 

loo 7 9] mmtik(Dm^vh^o ry]}^-i^3> 
'fn±:^5 0 3tmmi[:^fi6m^. ^uy-:fti±7^7 

1 it^by<4'f7 1 o^^g^-r^y'r-r/i-MJi^^^^ 

ir^ry^J ^ — i^a yya^yA5 0 9 tOUtrl- ct 9 
7-^/^^f^Ol4^}i^^i:5^J'^. lib. 3d 5 0 7(C 

$si,^^mf^(Dy7:y^i^B>\t. :tj-:^/u-^—y<3 o 5 

(a) \cj:^Wi^^ti^yr4/^'y:^y'^\^7C^i-6y7 
yi^i^a>^:fy—:^/i^'^—y<3 0 5 (a) ictri^-^. M 

[0 0 8 0] ;^ y-fe-v^;i5/^y^T!yyi/;^T^A5 1 3 

(BLP) 7 1 6\ZX^^m^fl^o y<y^:y=.>V^^ 

7'nir;<7 1 6fl;^-^-yH^— /-^S 0 5 (b) Icj:!?^ 
^^^^ti^y T ^ ^^-y^y' Mcioii ^ o 1^ y T ^ /i-T o 3 

(b) 5/-fe~-v^^DiJ^1-'5o o^y^r-r/i-7 0 3 
(b) d^y^r-r /i-F^tc^ >y-lr-^;^^*f5J©^^i^{::. 

p< yir'->^ftiimjii{ci/;^xi^i^tH^>'i^V7 1 Sic J: 

10 0 8 11 »^ LV^^^g^?iJT*f±. y<y^:i^>V^yy^ 

5 1 7l^v';^'rixi¥ai::3i>-i/>'7 1 5{cMi"^o v;^'7^ 
Ai^ttlni^/v?>'7 1 5;6M ^;/-fe:-v^^S£^tfci-rco(c^SC 
^/XxAl^tiJ:cyi;?v7 1 5 ft;^— 3 0 
5 (b) tc, p« ^'-fe-v^tcj; i9^^^tifc:7r^/i^Slf^ 
^^ftJiir. ^UTv';^-rA[q^t±ja: 7 1 5 ^mt^ 

5 1 7^i^j^1-5o 

[0 0 8 2] v-7;-rA7 0 1 C0^t9fF^^f^ 

11. ^'9(7)^^m^u^r.cD^^aiici^i-5Ji;:^jiwa t ch 

[0 0 8 3] Wa t c hDJt. 1 9 9 3¥6>^22B~ 

2 4 0(c:77 v;^llo:y-/i'— XT'gm^tLfc^2 30 

^^^(C:}oit^. fczz.-rv, y-r (Huang, Y)^Uf^> 
i/-(Kintala,C)(^ y ^ Ji^ h V U y ^ y^f)^% 
^^flltyy V^^LT : fi^^f?(!:Si^ (Software Implemen 
ted Fault Tolerance: Technologies and Experience 
s)" \ 992^9^30 0 tCffiH^ tl^ t ^-T 
y, (Huang, Y) C07l^Il#fFWillS 0 7/9 5 4, 5 
4 9-§-^ja# (^B>^CO^» : y':*-/!-}- h U7 V h=i 



[0 0 8 4] ;*^^PJcoia0^-ejl. Wa t c hDV^^T^i. 
fi, 1 i b f t <^iq^fm^7-f :/7y 
# / - Mc^i- 5 -0(0^ n ^ y a -fe ;^ 4r^^i-5 ^ 
^S^-f 5fc{j-r*J:v\ I i b f t f^, Wa t c hD(C 

tT9/^-^>'^^^i-5o ^:=^i5'fj:. Wa t c h D^t>* 

^S/r&ft-rSo 1 i b f t 7r>'^>'3:/tCj;f97"n-fe 

1 i b f t :7r^^i5'v^3 
[0 0 8 6] ^::i^5^<^)y-KtC^S;6S^4-r6^. m 

[0 0 8 7] -jJS:6<JiC. Wa t c hD^r^i^'ll^^t^tCifi 

[0 0 8 8] »•$Lv^^ji^^r|-e^^. afev^^^x^s i i& 

OJ/<.yiJ'r2/7'v';^f^i>.5 1 sfi^timwa t c hD 

^^^^^t-5o ^::^^i:"^';^7'A7 0 IC^r^yTjf-^ 

>'hi:(7)rB^coii^ft.^^7 2 i(::j:«9^^ix6o i^>;^ 
Xi^5 1 7 1 7Xh^o MM7 2 

lT*^$nS<t ^=:^^ 7 1 7Yl^<^'f'f^±ys7 

11, 7n>'hir::/KDi^7'D-fe;;^7 0 S.S.t/i/;^^'^ 
5 1 3 fy(D^:^^ 7 19 ^Smt* ^^i?^ 7 1 9 
::i^7 17, i:/^xAP?ffi3i:/i^>-7 1 5^^i;/-<:y^3: 
V-KncJ^T^n-ir^ 7 1 e^^^-fSo 
[0 0 8 9] li]7lc:^$tt^i: v^>^rA7 l 7H 
:7D>'h;ii>'KDir:/o'fe;^7 0 5, /^-ryyn-fe;^7 
11, v^>^^AI^t±iaiyv?V7 1 5, /<y^:i^:yVuif 
7'n-ir>^7 1 6{C*Dtj-5Pf^^t>*e/>^xA5 1 3<D^§ 
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^-14) ^-^x.^>^;^-rA7 0 l(Oa55>^2o^i-6rf-' 
[0 0 9 01 (DttBgl-KLT. mmm^<0:t-^<^ 

[0 0 9 1 ] Wa t c hD7!)^v';^xA 

f^T'* fcif IMT-t 5 ^ y tK-^^ ^ h -efe ^ i: I ^ p ^^{c 
g<5<, r^Xt^. Wa t ch'Dtm^X^Wfl^:^^^ 

[0 0 9 21 y<y^ryy^^y7.y'J:>.b 1 3<D^S 

7 0 l(t»:(OJ:9(ca)f^-r^o 7 1 7;6^i^;^7^i^ 

5 1 3 (omm^i^m't^ ^=^^^7 \ 7 \ty<-( -f-fu 

ir>^7 1 Kc^fbii:. ^^-T :/7'nir;^ 7 1 iti^oh 
3i:/KD^Vp-t;<7 0 S^i-^^U. y<^-fl \Q<Dy 

i-^yU-y7 0 7(DyT^^^m^'F\cm^^x.^o 
[0 0 9 3] ry"]) ^-'yB'^':^^±:^5 0 3{cj:y)i^ 

^^fh^/ y-t—t^yryi^i^B V;55/^>r>^7 1 OOPt 

-f-fu-^y. 7 1 \ t^h^<4'f7 1 om<Dmfc^^yr^/^ 

l2^i^^S*i-5o /^V>^>^^-fe;^7 1 Iti;^ ^y-fe-v^ 
^jV^i^aVjC, ^^uvhrcvKn^T'n-fe^^? 0 5 

t;::;^'^$tL/c^^-ry7 0 7(7Dy^r^/t-iS3i£^^-^;l. ^ 

/•^i/i^^aiyKDr/y^P-fe;^? 1 6 "Cf^/^ < :7 n hrc> 
Kui/T'n-t;^? 0 5lCtT<c. :7n vh^ivKni^^y'n 
•^71 7 0 57!>5-(oy — v^^Sftl-^i:. yuyV::ti 
y Kn ^yu±y 7 OSitZO);^ ^y't-i^^^^i^y^y' A 
5 I lP^(Dti^yr^^^7 0 3 (a) icEgi-^o 
[0 0 9 41 LV^JI^g^?iJT*{^, :y'fe:-v^yr 
iXg VJi/NW7^5 1 Oc^l^S^i^ccoj:^!-^^^-^^ 7^ 
n-t;5^5 0 3HTCP- I PT'n h=i/w$r^£ffiL. 

:^5 0 7\zi6\-j^y7i^^'yBy\z.^^^m^fi^:^ v 

^-y'y7V^^yBy\t2mm(r>i^y^^—^y. i-flt>% 
KjEp« y-t-i^t^^-:^ y±-i^^mmi-h::t\cX 
^/<^zf7 1 Ot^:^ y^-^J^m^-f^o ^ 5/-&-^^:7 

-r^t. ^^V:/7 1 O^^LTiJIft^n^^ 

[0 0 9 5] ^<y^ryy^yys^h.^ \ 3tmwr^ 

=^=^9 7 1 9tti/;^7"AI*ffi^>'v^>'7 1 5 b^^y 



^^yY^^y^^y7 1 e^M^a^ii. ^o^. ^ 
:=.^ 7 1 7 icia^-^^o "^^^^ 1 nyt^^-i-f-yu^y. 
7 1 Itra^q-r^o /^>r::^7'n-fe;^7 1 Ifi/Vy? 1 
0<7):7r-l'/^E3^'^^^1f L. LT:7n>' h^o- Kn 
i/T'D-fe;^ 7 0 5^*IT^ii:^o iJ^^^^ Ka i/T'p 
7 1 6>i5v/;;^7-A5 1 ZX^^mt^b. y^ti-ty. 
7 1 6fi:^-^-/^1^— 0 5 (a) 75^ lb n i?^:7 7 ^/w 
7 0 3 (a) C7)n t'^^^fi^tt. -^LT. r(7)z3t'-^ 

D>/:7r-r/U7 0 3 (b) icf^^Dl-^o i/^^r 
Al^tl:l^:/v^V7 1 5ttnir.7 7-f/V'7 0 3 (b) tC:|o 

[0 0 9 61 lib. 3 dlcX-^^m^tl^^y-t-'y 

yry^i^^yn. ^<^y7 0 7\zm't^y7-f/^mj& 

'T-^m^t^1jmt\^c:^mx\ /^V^7 1 oicMi-^ 
:7T-r/^i5^T-^^#-r5« y-k-i:^yT'y^ 
V3 V;^^^ :y-fe-v^^2|{f-r5fci6{Cy^^7'7 1 0(^7 

1 1 z)^b/^-^y:77-Y/l'E3ie^^^^t-5o ^ 
>;/-fe-v^7T:/iJ'C/3 :/fl^<^7'7 1 ooyr^/i'm^ 

[0 0 9 7] m^(Dm^^m}^9^<D^^{z.^m:^ti^. 

®^<^Zfy^r2-^^7 2 2(0ft^ 

^^^7 1 7;65r(D^^^^mi-5o ^/cJC^^li^tt 
fcyniry^ti, Wa t chD\CX^±—-f^tlfzyu-^ 
y^V^mt^h^Uy7 1 0--OgEj^^:^5gi-So ^CDftb.(^ 

[0 0 9 81 ©v';^7^Al^tii^>'v^>'7 1 5(OK# 
^::i^7 1 9/e>SC(D^S$r«ll±lU. i^^X AI^tB:i^ Vi:^ 

^^7 1 S^^^ib^-^^o 1 i b f t (c:J:)9^;tP>ix-6 
nfcv/;^7^A(^ai:n>'>::;^v7 1 5\t^^yr4/\^t)^b^ 

[0 0 9 9] ®^<y^=^yYu^Zfx2'^y.7 1 6(7)^* 
^:=^i5^7 1.9;65r<0|^^^«|ffiL. ^"^y ^ =^y ^-f 
u-^y. 7 1 e^^^Hi^^^o -fxj^:;^ 7 1 6(^^3:5/ 

1 9f^5(c, /^:yi:^^>-KD^:7'p-ir>^ 7 1 ^i^mi^Wi 
$nfcr t $r^rLi$? 7 1 7{Cji^L. Scl/^-C. ^^^5^ 7 
1 7{j:/^-f T'ynir^ 7 1 1 {Cii^i-^o T'n 
ir;^7 1 l{i/<>r>^7 1 0^Sfyc?'^^'<:vi^:ii>'Kni/7' 
D-lr^7 1 6lcg§j^i-S, =&Tyy^— 3^^:7 7 -f/^ 
m^\\h. 3 d(7)]S5ccOft5iiti/'?^7':/ci-fe;^7 1 

[0 10 0] ®>^n:/haivKDi^ypir;^ 7 0 5^0^ 

m 

yuyY:r.yY'ci^':fu-^y 7 0 5 (7?f^t^}^''>;^r A 5 

1 3(rymm%^mm^<oH'^^-th^ ^=^^7 1 7;&57 
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m^b:\t9^^\^. ^(O^^, 1 i b. Z&\C^n^:^y^ 

[0101] -tfu^yy^^^— 0 5(DM^ : H 
8-^1 1 

±XCO—M(^yr^/^^. ;Jt7--t>/Vi^— O 5 (a) 
J: I? ^ ^ T ;U'>;^ 7^ A T i; ^- 3 

/Vf— y<3 0 5 (a) \C X ^ W^^tl^y T /l^'y'^'r 

^ yl- v- >^ X A 7 0 1 It -5 ^ 9-* U-</l^^^ - ^ Fp^ 4 
0 5 <f:(7:)rBl<D^#.^^-fo 

[0 10 2] ^-Ms^ms 0 1 icidv^r. yr-^^^^- 

(B, D, E, G, I, M, N) ^Jgj^'r^7 7^/H± 

-;t^/H^w^3 0 5 (a) {c:^LTji^1-5::i:/5>'e 
tfc. /i^-hi>^hy<:^^-McXr)m^^fi^yT 

4^^<D:^^-'J^i^'r^^X(Dyr4/i^(D^~-J^^'^^-t^o 

[0 10 31 If l/^/W^-/^^T:y•7'7T^/V':/7^X 
y -^<oy r -r y r y a 
5 I 3};f^(D^<y^ryyyr4McMl'Xnt>ti^o M 

Sr-ft. 4li<Df-7'y y-, 8 0 3 (a) , 8 03 
(b) ^t>*8 0 3 (c) i>^^<>y:^Tyy'i--<^h<Ot\. 

[0 10 41 ^-A^M8 0 l{C*5tt57^-^ 

:7r>r/U'D, E, G, I, MXIiN{c>^-r5^Mf^. r 

$r4i:6-e&5 5o p^tc, -TH' i/^ by c, f, 

t5 L {c^-r 5 ^i: :i (^^^ :y ^ T :/ 7^:7 r Mz.^ 
-r5^3E^^i:5T*fe5 3c if:/:vy-f^c7)^To:7r 

7^M^. f-yy y-o/u- h-cfos-r-Y h y (^/'^ 
$tl^o 0iJxtt\ i^:/^yy-8 0 3 (a) {i. /^t;;^- 



A/A/C 8 0 5 (a) [^^19^-1^ I^^/^^-A^PbI 
4 0 5{:::^c5V^T^§^^tt6o 

[0 1 0 51 W5*-Ct,?S<. L^^/w;^-is^rHl 

4 0 5(iv/;^xA(^ttl^v^:^y 7 1 5tcJ:'9#^^$tL5 

5o ll9(C?j^$tl5 J: 3i:i. K-^y7*5 1 7 

T-f/H^ir^-r^^v h y ^^^-r^o ^vhyti, ^- 

ff^9 0 50 5 1 3 0 2O(;)gi55^^^ib?i5a 
[0 10 61 ^-If l^-</^^--ASfBHf^9 

^u^fV^—K'^f^A^^\c^\i^yr^f^^Wmt 

;^-^>yUi^-/^3 0 5 (b) Idi: »?#t|^^ti5i/;^r A 
^(DyT-fju^mm-r^o 
[0 1 0 7) K-^yy 5 1 7ft^^-A^rHl8 

0 l<^i^7':y y— ^/Ui?— /•<3 O 5 (b) 36^/-^ 
5/i5r:n>.Kn^7'n-fe:;;^7 l 6&i;v^>^7"AI^tti3iyi;^ 
>-7 1 5\Z.W^\^fcy7>{/^i^:^y'J^(D:^-A^m9 0 

7(D'^yyv-\c'^y\^'>i^'r^zt^'^m\c-r^o - 

co-ri7b°>':/H. ^-A2^P«18 0 l(Di?-:;^:y y-<o/^- 
h^^/^>^^-A^^— A^FbTO 0 7(OM}i5ir^D':/y}) 

[0 10 81 /V— ho^y^^^^-M.i^'^zfy V -\h(Dy 7 

^ ^l^(D/<7.:^^—M,(Dy'uy ^ y^ y^t^^ittix^^^o 
f-;/yy'-8 0 3 (a) ic*5it6^^;^-^-Ati:y 

iy^;^/A/C^W"r6, 1f>^^>y~8 0 3 
(a) ^(Dy 7 /^E(Dy<y^^—J>.\tEXh^o 

^Ps^g 0 7{cio\/^T. ify^y y-9 0 ^-a 

0 lii^ibZfUy^>y^><./A/C^^-M.^m9 

07<Dzf\^y^ y^y^/z\C'7y\fiy^^hz.t\^X 

^9. -y- >^^^;^y-8 0 3 (a) fd^iS^^t^o ■7:yt'y>r 
36S^TLfc^. ^-ASPb^S 0 1 i^:*Sit-5/^';^^-A/ 
A/C/EICj:l9}t^^H57T-r/K0'^IE{t. ^^-A 
^Pb^9 0 7\C^\ihy<7.^^-J>./Z/Z\CX^^^^fl 

[0 10 91 :7P>hJi:^ K^Sa^>y-5 0 5(7)1^^ : 

Bl 0 

UV^^ffi^jTi^. ^-if U-</V^-A$Pb^ 4 0 5 It 

:7nv h:3z>KmK:/y--5 0 5(c:J:0^^^ti^o HI 

1 0\ty^:yV^:^V*1Simy^)-^0^^UU\^7r^ir^ 

^y^mXhho :7nVh:n>K^yy-5 0 5(7)2 
ocO^^/.^=iV7K— MtRTREE 1 0 1 5 .J: r 
-T/^ieiE^^^-y yi/^ 1 0 2 7T'fc5<, RTREEIO 

1 ^\ty<yi7Ty':f^fih-<^y7^^^^^^^^':^y 
y — 8 0 3<Df\^— v<r>y<:^^—i>.t^V>"^ Sixfcy ;^ h 
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[0 1 10] yr-^^^B^l-^^yi^^ 1 0 2 7(1. 7 

r'f>'^l2i6^^X^M:^^I/^>^ h U (inode)f^ 
— y/U^(DyT^^^<D::r^yhV ( i n o d e ) iCX^y 

loi 1 U y7-(/^(Dyr^/i^W,^^lty7^^^^^ 

y7^^^^:t-y>^LX\^^^mfc^i^^Vh^o UNI 
^t;i nod em^U\Cy^y<4 y^RXl i node ^^^T 

v\ 

[0 1 12] ?|#^V>r5{Cp*S{C|S£0^-rtLl^. max 
t r y 1 0 0 SRXfi n i t 1 0 0 5 fl7 p V V K 
^Sa:vy-5 0 5C>??]M>(b{;:^ffl^tl.5o max try 

1 0 0 3(1. OTit:«Bg^^=¥7^^r i/T^-rSmlf::. ^^-^ 
7 1 0^^^.yi5^T:yyv';^7^A5 1 3 icHr y h T s/ 7^1" 
-Sfci^iC^ff bVcilHia^^i-o i n i t 1 0 0 Sfl. 

>f >^;&s*fe y h r y^^tiitt^^ii^i^'ro R P R O P T 

[0113] RTREE PTR1013J1. RTRE 

E y >^ M 0 1 5om^(o^m(7)y^^>^. ^^it>h. 

^m^y y - 8 0 3 (D^^^m^^t-r^ y y ;^ h 
xh^o "S-mm 10 17 it^m^ y - s o 3 coyv- h(o 

1 0 2 1 , 1 0 2 los^? 1 0 1 

9^iKy y ;^ hp^co^^cog^ic^-rs^'f 1 0 

2 3 ^S-^-rSo ^^-y— ^< 1 0 2 5 ity<^y ^Ty zf'y 
;^XA5 1 3tC»-r'5/'?^7'7 1 OCO-^— A^FbIS 0 1 

[0 114] FD^i':y>>^ 1 0 2 7 H 7 r >'^l2ifii^ 

:^r^>'S^:x3ivb y 1 0 2 9or i^— -cfoSo ::<^ru 

-P^c0:3i>' h y 1 0 2 9lt. TT'y >'7'D-tX 

5 0 3(c^uTfw^^?:^7r-r/via^e^t(^i:.< 

#l:^ffi-rSo FD^-r 1 0 2 7[^(DElf^(?)77 

-r/He5i^O:3^v h y(Z)>r^^-r 5/^>^f:i7r^/i^lBa!^ 

r-foSo :31V h y 1 0 2 9 (1. h y ;5s^ic^^-e*> 
S;<)^S;0^^^b. ;5^o, 7r^>'^;5^:t— 7'>'^?:h.rv^'5 
Wi. r7'y<5r'-v^3>'7'nir;^5 0 3d5^^^StP^>5;5^ 

[0115]:^^^Hyi02 9{l±V7:xA5 1 1 

^'t ^y 7 ^^^^'f^<^ \ 1 0 1 t^'yy^T 

i>.5 1 ltCjott5 7T'f i n o d eCOM'J^t^^ 

-rSo RTREE 1 0 1 SiCjoJtS^i^yhyiCizOli^ 
$nS-y-7:>y-8 0 3T*^IC^-yv$nTl/^6^7 



r-r/^(7:)^^:ii>' h y 1 0 2 9;5^#ffii-So 

[0 1 16] Ay^:3i>- K'^:y7'5 1 7 COp^ 

K-eyT'S 1 7H. /'^;^;!^-i^-r-/7'l 1 1 

3 ^::^-7'>1tjK7T-f 7. hill 7(D2-:>(DU^ 
t^b^^^o y^y^^-^—M.^yyi 1 1 3(1, Sv-T^xAS 

I i(D^— asPh^so 1 (;:*3»"tS^'^>^^"A^y^'yi5^r 

:y7'V77^A5 1 3(7)^ — A^rfl9 0 7 (Dy< 

-^yy'-t^tcnxh^o '^y^^(D^=^>h y 1 1 1 5 

II. 7n:/ hjiyK/^y;;t—Al 1 1 7 (h^-^ 5/^5^:1^:^ K 

1 1 9 t (^r^ COgSfi^^^lStf So 
[0 117] y<:^:^ — J>.-^y:fl 1 1 3 fCfl. 7n:/ }> 
oi^^ K^— A^Fp19 0 7tCjbN:tSf-7":vy — 8 0 3 60/U 

-h^^-i^^^9 0 7lc:jo(:fS1^:/:^y-(^;v^"M:: 

>'^/^lv'^7^i^^^7r^/Wc^o^/^■c^g^^ttSo 
[0 118] 7i--y':ymMy7 4/^V :^ h 1 1 1 7(1. 
TT'y Jx^n-trT^ 5 0 3 ;ii5:etOlSS{^7 y - 8 0 

3{C:^\^^Xm^:t—y>LX\^^^^y 7 ^ ^^(Dn^y h ]) 

I I 1 g^s-^-fSo h y 1 1 1 9t^:joits^-if 

U^/U^-M.^m^^9 0 3H7n>'hai>'K7r-f/W 
^SU^^ (FFID) 1 1 0 5^t;f>'n vh3i>^hv^:?^^ 
-A (FP) llOe^^^-rSo 7n>'hji^^K7r 

-r/Vf§^SlJ^ (FFID) 110 5 H±i/7.x A 5 1 1 \:L 
ion ^y 7 4 /i^(D7'y<^ y^mWl^ t i n o d eaSUT-Ti^ 

[0 119] 7n>' hoi:/ hVN;^;^; — A (FP) 110 
6(17n>^ K7'U7^ -/iP'T; (FPR) 1107 

f^yyV-y^^^—J^sllOSlZ^m^tlbo 7nv 
Kyi^7^ 5/^5^^ (FPR) 1107(17P>'h 
in^- K^-A^r^5 8 0 1 {C:i6i,1^ ^y 7 4 /^(D-^yy V — 

(D-fyyy 4 y^xhh^ -y-^^^y y -/^t.:^;- a i i o 
8 fl-?: tz>f- T'^y y — :7 T >'^«^^'^*^ So 

1 1 1 7(CibMtS>'^!y^T^yy>'7;xA'(t^9 

0 Sflz-^^iJ^^v K7r-r>'i^lBai^l 1 1 Xt^hf^i^r. 
[0 12 0] K7r-f /UBiS^l 1 1 

r(Z)7T^/^iCOl/^r^— -t^'H^— -^^3 0 5 (b) {CJ: 
<9 ^ S 7 T ^ ^ 7" it S 7 r ^ >'^l2izli-?- 

7tl/N5'i^^x-7'/W<!r LT^m^tlSo rtD/N^'i^^ 

r-:;^/Wl. 7n> hni> K7r-f>'V»J^l i 0 55: 
'ayuW:sL^yY/<7.:^—K \ 1 0 6 (7)f?l:^(C J: «9 TiJ' 
■fe:^r*#So 

[0121] x-^#l3g5 0 5^TJ5 1 7^-^tf^i-^ 

7=^-^^ig5 0 ^Rjj^ 1 7^f^^i-s*i*^r5rtie> 

^/3 VT'n-tT. 5 0 3?l:='~-V'>:n/U^^^-f SUN 1 

X V :^ :^ x A -entrl- So 
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[0 12 2] =i-yiy:iiMt. 7'niry^;6^ENV^^^ 

[0 12 31 Y^fS.^ti^t. y—rffv^ 0 5{i. y-f') 

TT^y ^-v'H >-ynir7L 5 0 3C0^7'n-tr;?^IC>tt 
LT^M'STHgr-fe^o wC0^7'c2-fe;^{i, UN I X;^--^ 

Co exec V:^-ri>.l¥ffifl^>^P*fe:;^{-^fc:/i 

[0 12 41 ^yiQ c'iyTs'rh.nmzl.^^^^^fz.r 
:7P^ h:n^KmS:^y-5 0 5^f^^-r6fca6tc. 1 

i b. 3 dfi. Sffc/^:/^-t>^|COV^rffJffl'5Jtg/^EN 
V{C:7DVh:3i:/K^:y y--5 0 5^:3t:'— e x 
e c >'^J^ ^^^-r^o Z.(OfL^. -fn^^Tst^f^ 

-CfeoTtx lib. 3 dti;i(^)7'n-fe^{c^Lr*iJffi 

y-505^exe c ic J: f^^^tbfci^y Pir;^{c:/^° 

mmx^6. 

[0 12 51 y 7 4 /i^mmc<:^\^^xmmm'r^o ::tt 

A (t:) y y — ^ T- ^ V iy ;^ A (D^ — A ^ PhT ic 

ii^Di-^o if^LV^^ft^J-t^ll. lib. 3dT-^S^ 

mso I (D^yy y -^mMy y - 8 o 5 ^ lt^— if 

[0 12 6] -^^yhr-^KD^-h^X^m^tl^m^. 
^ti^-y-T'^y y~8 0 3(D;u— h(Dy<:^^-AXh^, 
}j^:x.yy]) 1 0 1 7^f^s!cL. -^LT. ^co^i^hy 

^laM^y y-1 0 1 5iciiip-r^:i^(-j:«9. f->^:yy 

-8 0 3 >&^-if ^ 40 5 JCiiAD-fSo 

y 1 0 1 7^ig*i^>y-i 0 1 sfi^hwrn-r^ry-^^ 

ymifi^^^ir^o 

[0 12 7] Ty^V^-i^3>y^ti^:;^ 5 0 37bmUy 

y-s 0 5^(oy 7 4 McMLx:t-yymi^^nom 

lib. 3 dP^CO^— 7'>'7r ViJ^ v-a Vfl. SPffc 



\c:t-yy ^titcy7-( Mm-r^y 7 ^ ^^m^^^^ 

yiy=^::^yh]) 1 0 2 9^f^^L. T'V;^ ^/-^-i^ 

—rfy:^ y±—iy\tyt—y'y^titzy74/\^(D±iy:^'r 
A 5 1 1 tcio^j•^^^';^^^-A, r'/^-r i n 

0 d eaS'J^tr^tfo 

[0 12 81 r CO^ — v^;55v/;;^xA(^hti:r.yi/>'7 

1 5{Ci 9lltT^n5 (h. K-^:y7'5 1 7-C 
:^y h y 9 0 1 ;65f^^^tl5o ^ 1 1 3{t. ^ 

i^T.'rJ^b 1 l-e;d--:7'>'^ttrv^2>7r-r>'Hc:^iSt* 
^/^>y^^v Kv'^^t'as 1 3\z^{^^y7-< ^"^^^n. 
-thti^sbK^m^n^. nm'f^y7 4;\^(oy7 4/i^^ 

mi'\'i^^^y^^>Vy7>(?\-^W&^\ 1 1 Kdiag^tu 

[0 12 91 y74/\^t^:^—y'>'^f\^^t. 
5 1 i(c:i^Jt^:7r>f^^^mt. 7r^/^^i^S'J-r^fc 
}h\zy7 4f^m^\'^^^mir^o y<yi^ryzf^y:^y'J>. 
5 1 3(C^o{t5^^:yi:'r :y:/y^T-r/^{->^-t6^^c;i-^ 
m^(Dfz^(0?f^ :y-fe-v>fi. y74 ^l^^Mm-t^fcibi.Z 
y'yU^mm'f't i n o d ef*SlJ^^^$ffii-S, r<^J: 

>'7 15Ji. ?^ y±-i^\^xm'&^titcy'y<-(y^RUi 
n o d efdoi^T. T'V^SS^^r -^/U-IJ ;^ M 1 1 
7rt<75^>^ b y {CT^ir;^-r^fcttr*i:v\ r<^::ii>'h 
y ft^^:y^T yT'e/T^T^AS 1 3 ^^nir^(D\Z»^^^tj: 

y7-<y^m^^i 1 1 i^^^f^o 
[0 13 0] ry])^—-yB>:/^±:^5 0 3ii^^^y 

V — S0 5\^(Dy74/i^^i^^ — :<i'h^^. lib. 

3;5^^ft^i-6o '^y'^±y^t*^y74/^^^F^Lx\^^tj: 

V^;g-'a•> ^n-X:7r ^'i^v'a Vfi:1ijS^yy-5 0 5f^ 
1 0 2 9 L. T^/^^-f ^^mWl'f'RXf i n o d e SIS 

5 1 3{zmm-r^o 

[0 1 3 1 1 i^;^7"Al^tBi3i>'v?V-7 1 5t^Z(D?i y± 

-v^^Htri-^^^. r(^:7 7^/KD:x:/ h y 1119 
^^^i^i^tzMc^ fy^-f >^Rrj \ nod eiiSiJ^^^ 

K7T-r>'H2a!i=-l 1 1 1 i^ffifflb/^ 5/^X5/ >^>-;^x 
A5 1 3f^(7):7r^/V'^i5^n-Xb. -tLT. ft^t;:. 
:^-7'>'a®:7r-f/^y Mil 7^>b:3iy hy i 1 
1 9^Bdl»i-5>o 

[0 13 2] j^±. !f l/-</W^:y^T:y7'y'r^/^ 
7 4/^i^y^'rJ^<Dm^^j:mm^\^m^x^^ct\t'^m 

^\zmh^^xh^o mx.\j. Bi^L\^^'Mmm\t. uni 
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^ti. B^L\^^mMm(D^^(Dm%\tvN I x^-<u- 
(0 13 31 mm\^. H/^^ifefi?iJ(l. S u n(D:t-< 

yyt2 - tfj:Uc-ft2 ± y.(DmW} 

^> - A ?^f«^ 3^ 7" ^ V ^ i/;^ r A ° 

mt^fcMch^mx^ 

[013 51 

[i]®(Di^¥^^m§^i 
^mxh^o 

lm2] y4^y^)t^=^—'^-fu^yK(D>{:y^—yz^ 

-y^^'^'m:f^^^^^^^mmx^^. 

[113] mm^')y^^Mzy>{'fy^)^m\'^Xir-<\y 

[(US] mmcvy^^ritzy^:/y])^^m't^^- 
[®6] mm^')y^^Mcy^':fy')\c^k^^jv-^ 

xDmMmxh^o 

[117] r^.— tf u^/w<-/^r y7':7r></u->;^-r A(D 
[i]8] (a) [C^^Wi^^n^^-^-^ 



(b) [ci^Jtt^^nS^-A^fairt^li^Sr^-rT'n 

[mo] y^>V:^>YmMyd-sos(om'&^7T^ 

-r-y^y^mxh^o 

[Dili y^^y^^nv K-^yT'S 1 7 0fi|it^^-r:/n 

y^mxh^c 

10 1 ?^5^(5C)/<:y^r :yyy^r^/^V;^TA 

103 ryi;^— v^a >^:/pir;^ 

10 5 ^— if 

107 :t^iy—y'^y^iyy^y'J>^ 

113 ^/H^— 

115 K7-r^^ 

117 "f^y^^ Vy-fzf 

3 0 5 ;<7— ^t^/l^f— 

3 0 7 if^n-fe;^ 

3 0 9 ^—i^B>":/u^yJ^ 

3 15, 321 x-f V:/v'^xA7-r>^7y 

40 3 ;i--<u-x^>'i/v';^^A7>f7'y y 

4 0 5 =^—'f U-</U:^—J^^m 
40 9 rL— tfycr-fe;;^ 

5 0 1 tf I/x<y^/^'.;,>^x>y7':7r^/^v^^xA 
5 0 3 r^^y^^^-i/H^/V'nir;^ 

50 5 7ovh:xvKiaia^>D- 

5 0 7 1 i b. 3 d 

50 9 T^D ^—i^3>":ft2^yA 

5 11 ^i/;^xA 

513 /<:y^r 5/>^>^xA 

5 15 /<:y>5^iii>'K'^-/y 

5 17 /^>i^:ii>'K-v:y>^ 

70 1 t?*^^/W^y ^Ty T'y'T'f /^'>^7^A 

7 0 3 n^/-7T^/^ 

7 0 5 7u> hmv Kn^T'niTT. 

707, 709, 710 y<-(y^ 

7 11 /^VT'yn-fe:;^ 

7 1 5 lyy^TM^v^m^yiyy 

7 16 Kc3;/yn-fe>^ 

7 17, 7 19 

8 0 1 y T 4 /i^i^yy" 

9 0 3 A^felif « (U L N I) 
90 5 ^<y^r^y^i^y>y'M.^n (BS I) 

9 0 7 A^ffl 

9 0 9 "^-yy y " 
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